diff options
| author | Peter Marko <peter.marko@siemens.com> | 2026-01-16 20:39:21 +0100 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2026-02-16 09:52:35 +0000 |
| commit | 463172affb85d906cf89e1da227678759982f369 (patch) | |
| tree | eb9872ec94aa94237e8f79cea60f46434ed16e6b /meta/recipes-core | |
| parent | 028444d60860a80a6d913c7017b5156cc2bc6b52 (diff) | |
| download | poky-463172affb85d906cf89e1da227678759982f369.tar.gz | |
zlib: ignore CVE-2026-22184
This is CVE for example tool contrib/untgz.
This is not compiled in Yocto zlib recipe.
This CVE has controversial CVSS3 score of 9.8.
(From OE-Core rev: b00a1990237d473971076c4f92a1060911b8b323)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit b0592c51b6ad038d737d2f6b30977bd0c5c50058)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-core')
| -rw-r--r-- | meta/recipes-core/zlib/zlib_1.3.1.bb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/meta/recipes-core/zlib/zlib_1.3.1.bb b/meta/recipes-core/zlib/zlib_1.3.1.bb index 53bad5a1ca..4992f83463 100644 --- a/meta/recipes-core/zlib/zlib_1.3.1.bb +++ b/meta/recipes-core/zlib/zlib_1.3.1.bb | |||
| @@ -48,3 +48,5 @@ BBCLASSEXTEND = "native nativesdk" | |||
| 48 | 48 | ||
| 49 | # Adding 'CVE_PRODUCT' to avoid false detection of CVEs | 49 | # Adding 'CVE_PRODUCT' to avoid false detection of CVEs |
| 50 | CVE_PRODUCT = "zlib:zlib gnu:zlib" | 50 | CVE_PRODUCT = "zlib:zlib gnu:zlib" |
| 51 | |||
| 52 | CVE_STATUS[CVE-2026-22184] = "not-applicable-config: vulnerable file is not compiled" | ||