diff options
| author | Peter Marko <peter.marko@siemens.com> | 2026-01-16 20:40:07 +0100 |
|---|---|---|
| committer | Paul Barker <paul@pbarker.dev> | 2026-02-27 15:54:01 +0000 |
| commit | ad756dec39fd654025b4bb82a3389e49e68a0253 (patch) | |
| tree | 43a14ee95a7abb3a4450cc661147019156a64bdb | |
| parent | 58f9b898daef8272184b1be176a18428f9f9d9b3 (diff) | |
| download | poky-ad756dec39fd654025b4bb82a3389e49e68a0253.tar.gz | |
zlib: ignore CVE-2026-22184
This is CVE for example tool contrib/untgz.
This is not compiled in Yocto zlib recipe.
This CVE has controversial CVSS3 score of 9.8.
(From OE-Core rev: 1bdcd62d34b0b060b0e1e5142c5f3e7075f21cc2)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
| -rw-r--r-- | meta/recipes-core/zlib/zlib_1.2.11.bb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/meta/recipes-core/zlib/zlib_1.2.11.bb b/meta/recipes-core/zlib/zlib_1.2.11.bb index dc8f7c6c85..8dd0a90b52 100644 --- a/meta/recipes-core/zlib/zlib_1.2.11.bb +++ b/meta/recipes-core/zlib/zlib_1.2.11.bb | |||
| @@ -58,3 +58,5 @@ BBCLASSEXTEND = "native nativesdk" | |||
| 58 | 58 | ||
| 59 | # this CVE is for cloudflare zlib | 59 | # this CVE is for cloudflare zlib |
| 60 | CVE_CHECK_IGNORE += "CVE-2023-6992" | 60 | CVE_CHECK_IGNORE += "CVE-2023-6992" |
| 61 | # vulnerable file is not compiled | ||
| 62 | CVE_CHECK_IGNORE += "CVE-2026-22184" | ||