From e3c4c4ffb5ab3a7defb99afef30dedf48936dd2c Mon Sep 17 00:00:00 2001 From: Mikko Rapeli Date: Fri, 15 Jan 2021 12:53:05 +0200 Subject: flatbuffers: whitelist CVE-2020-35864 CVE-2020-35864 is for the rust crate for flatbuffers, not flatbuffers itself. https://security-tracker.debian.org/tracker/CVE-2020-35864 "NOT-FOR-US: flatbuffers rust crate" Signed-off-by: Mikko Rapeli Signed-off-by: Khem Raj --- meta-oe/recipes-devtools/flatbuffers/flatbuffers_1.12.0.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-oe/recipes-devtools/flatbuffers/flatbuffers_1.12.0.bb b/meta-oe/recipes-devtools/flatbuffers/flatbuffers_1.12.0.bb index fb4be0f166..bbc2a4a1d6 100644 --- a/meta-oe/recipes-devtools/flatbuffers/flatbuffers_1.12.0.bb +++ b/meta-oe/recipes-devtools/flatbuffers/flatbuffers_1.12.0.bb @@ -17,6 +17,8 @@ SRCREV = "6df40a2471737b27271bdd9b900ab5f3aec746c7" SRC_URI = "git://github.com/google/flatbuffers.git" +CVE_CHECK_WHITELIST += "CVE-2020-35864" + CXXFLAGS += "-fPIC" BUILD_CXXFLAGS += "-fPIC" -- cgit v1.2.3-54-g00ecf