diff options
| author | Gyorgy Sarvari <skandigraun@gmail.com> | 2026-01-03 09:48:34 +0100 |
|---|---|---|
| committer | Gyorgy Sarvari <skandigraun@gmail.com> | 2026-01-08 22:03:03 +0100 |
| commit | 3dc63bce4de9f8c9dd44264d17430bfb91cc17be (patch) | |
| tree | 28bd189583dd80775c312e54310cf5a2c3b0152e /meta-oe/recipes-devtools | |
| parent | e88e353f30744a54b0031e5fcc0d00baa6b7f7a7 (diff) | |
| download | meta-openembedded-3dc63bce4de9f8c9dd44264d17430bfb91cc17be.tar.gz | |
nodejs: ignore CVE-2024-36137
Details: https://nvd.nist.gov/vuln/detail/CVE-2024-36137
The vulnerability affects the permission model, which was introduced[1]
in v20 - the recipe version isn't vulerable yet.
[1]: https://github.com/nodejs/node/commit/00c222593e49d817281bc88a322f41f8dca95885
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Diffstat (limited to 'meta-oe/recipes-devtools')
| -rw-r--r-- | meta-oe/recipes-devtools/nodejs/nodejs_16.20.2.bb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/meta-oe/recipes-devtools/nodejs/nodejs_16.20.2.bb b/meta-oe/recipes-devtools/nodejs/nodejs_16.20.2.bb index 11e9717c6a..2a7324a203 100644 --- a/meta-oe/recipes-devtools/nodejs/nodejs_16.20.2.bb +++ b/meta-oe/recipes-devtools/nodejs/nodejs_16.20.2.bb | |||
| @@ -49,7 +49,7 @@ S = "${WORKDIR}/node-v${PV}" | |||
| 49 | CVE_PRODUCT = "nodejs node.js" | 49 | CVE_PRODUCT = "nodejs node.js" |
| 50 | 50 | ||
| 51 | # the vulnerabilities were introduced in v20 | 51 | # the vulnerabilities were introduced in v20 |
| 52 | CVE_CHECK_IGNORE = "CVE-2023-30583 CVE-2023-30584 CVE-2023-30587" | 52 | CVE_CHECK_IGNORE = "CVE-2023-30583 CVE-2023-30584 CVE-2023-30587 CVE-2024-36137" |
| 53 | 53 | ||
| 54 | # the vulnerability was introduced later (with libuv 1.45) | 54 | # the vulnerability was introduced later (with libuv 1.45) |
| 55 | CVE_CHECK_IGNORE += "CVE-2024-22017" | 55 | CVE_CHECK_IGNORE += "CVE-2024-22017" |