diff options
| author | Ranjitsinh Rathod <ranjitsinhrathod1991@gmail.com> | 2021-10-27 18:26:18 +0530 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2021-11-03 11:18:56 +0000 |
| commit | 482a84bf621bac0f88f55108e1941df3a8a8b4c1 (patch) | |
| tree | 8cb5ea596a10b2bf48904b7a3d380b1e7a226df3 | |
| parent | 5f26494b3a5e296d99be7634b96e6dc62c6896b5 (diff) | |
| download | poky-482a84bf621bac0f88f55108e1941df3a8a8b4c1.tar.gz | |
curl: Whitelist CVE-2021-22897
CVE-2021-22897 is affecting only Windows, hence whitelisting this CVE.
Link: https://security-tracker.debian.org/tracker/CVE-2021-22897
Link: https://ubuntu.com/security/CVE-2021-22897
(From OE-Core rev: 543a72e115340f3a7378b8b85bd48a0b495b3919)
Signed-off-by: Ranjitsinh Rathod <ranjitsinh.rathod@kpit.com>
Signed-off-by: Ranjitsinh Rathod <ranjitsinhrathod1991@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
| -rw-r--r-- | meta/recipes-support/curl/curl_7.69.1.bb | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/meta/recipes-support/curl/curl_7.69.1.bb b/meta/recipes-support/curl/curl_7.69.1.bb index d7ffb2dc50..bc1b993e9e 100644 --- a/meta/recipes-support/curl/curl_7.69.1.bb +++ b/meta/recipes-support/curl/curl_7.69.1.bb | |||
| @@ -34,6 +34,11 @@ SRC_URI[sha256sum] = "2ff5e5bd507adf6aa88ff4bbafd4c7af464867ffb688be93b9930717a5 | |||
| 34 | CVE_PRODUCT = "haxx:curl haxx:libcurl curl:curl curl:libcurl libcurl:libcurl daniel_stenberg:curl" | 34 | CVE_PRODUCT = "haxx:curl haxx:libcurl curl:curl curl:libcurl libcurl:libcurl daniel_stenberg:curl" |
| 35 | CVE_CHECK_WHITELIST = "CVE-2021-22922 CVE-2021-22923 CVE-2021-22926 CVE-22945" | 35 | CVE_CHECK_WHITELIST = "CVE-2021-22922 CVE-2021-22923 CVE-2021-22926 CVE-22945" |
| 36 | 36 | ||
| 37 | # As per link https://security-tracker.debian.org/tracker/CVE-2021-22897 | ||
| 38 | # and https://ubuntu.com/security/CVE-2021-22897 | ||
| 39 | # This CVE issue affects Windows only Hence whitelisting this CVE | ||
| 40 | CVE_CHECK_WHITELIST += "CVE-2021-22897" | ||
| 41 | |||
| 37 | inherit autotools pkgconfig binconfig multilib_header | 42 | inherit autotools pkgconfig binconfig multilib_header |
| 38 | 43 | ||
| 39 | PACKAGECONFIG ??= "${@bb.utils.filter('DISTRO_FEATURES', 'ipv6', d)} gnutls libidn proxy threaded-resolver verbose zlib" | 44 | PACKAGECONFIG ??= "${@bb.utils.filter('DISTRO_FEATURES', 'ipv6', d)} gnutls libidn proxy threaded-resolver verbose zlib" |
