From 58b86dbf5e991079491005c545f04ec4fba2038f Mon Sep 17 00:00:00 2001 From: Ross Burton Date: Mon, 23 Oct 2023 18:38:20 +0100 Subject: zlib: ignore CVE-2023-45853 This CVE relates to a bug in the minizip tool, but we don't build that. (From OE-Core rev: a32f285501b459cfe18e3135a3c531b63f58034c) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie --- meta/recipes-core/zlib/zlib_1.3.bb | 2 ++ 1 file changed, 2 insertions(+) (limited to 'meta/recipes-core/zlib') diff --git a/meta/recipes-core/zlib/zlib_1.3.bb b/meta/recipes-core/zlib/zlib_1.3.bb index c8fd855ee6..1ed18172fa 100644 --- a/meta/recipes-core/zlib/zlib_1.3.bb +++ b/meta/recipes-core/zlib/zlib_1.3.bb @@ -45,3 +45,5 @@ do_install_ptest() { } BBCLASSEXTEND = "native nativesdk" + +CVE_STATUS[CVE-2023-45853] = "not-applicable-config: we don't build minizip" -- cgit v1.2.3-54-g00ecf