summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMathieu Dubois-Briand <mbriand@witekio.com>2022-12-08 15:23:45 +0100
committerArmin Kuster <akuster808@gmail.com>2022-12-20 10:48:59 -0500
commit309fde5ae782a7961aa0c0cec9d477374eff62f4 (patch)
tree30f9347710aeda8cc184d22e191c687f342fe1f2
parente972c95314a157fbc77c8746427306c4529a7fcf (diff)
downloadmeta-openembedded-309fde5ae782a7961aa0c0cec9d477374eff62f4.tar.gz
nss: Whitelist CVEs related to libnssdbm
These CVEs only affect libnssdbm, compiled when --enable-legacy-db is used. https://bugzilla.mozilla.org/show_bug.cgi?id=1360782#c6 https://bugzilla.mozilla.org/show_bug.cgi?id=1360778#c8 https://bugzilla.mozilla.org/show_bug.cgi?id=1360900#c6 https://bugzilla.mozilla.org/show_bug.cgi?id=1360779#c9 Signed-off-by: Mathieu Dubois-Briand <mbriand@witekio.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 90645db2fa078b50ec6807c75acea913b49ea669) Signed-off-by: Armin Kuster <akuster808@gmail.com>
-rw-r--r--meta-oe/recipes-support/nss/nss_3.74.bb4
1 files changed, 4 insertions, 0 deletions
diff --git a/meta-oe/recipes-support/nss/nss_3.74.bb b/meta-oe/recipes-support/nss/nss_3.74.bb
index 73701393e6..4a9482fca4 100644
--- a/meta-oe/recipes-support/nss/nss_3.74.bb
+++ b/meta-oe/recipes-support/nss/nss_3.74.bb
@@ -284,3 +284,7 @@ CVE_PRODUCT += "network_security_services"
284 284
285# CVE-2006-5201 affects only Sun Solaris 285# CVE-2006-5201 affects only Sun Solaris
286CVE_CHECK_IGNORE += "CVE-2006-5201" 286CVE_CHECK_IGNORE += "CVE-2006-5201"
287
288# CVES CVE-2017-11695 CVE-2017-11696 CVE-2017-11697 CVE-2017-11698 only affect
289# the legacy db (libnssdbm), only compiled with --enable-legacy-db.
290CVE_CHECK_IGNORE += "CVE-2017-11695 CVE-2017-11696 CVE-2017-11697 CVE-2017-11698"