mirror of
https://git.yoctoproject.org/poky
synced 2026-04-17 09:32:12 +02:00
golang: ignore CVE-2021-33194
This is a bug in golang.org/x/net/html/parse.go. The golang compiler includes a partial copy of this under src/vendor/golang.org/x/net/ however the "html" subdirectory is not included. So this bug does not apply to the compiler itself. (From OE-Core rev: b8a851faef9990ccb41ded875fc79cf28abd4a4e) Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
committed by
Richard Purdie
parent
e4a273eb58
commit
122b22b366
@@ -66,3 +66,6 @@ CVE_CHECK_WHITELIST += "CVE-2022-29526"
|
||||
# Issue only on windows
|
||||
CVE_CHECK_WHITELIST += "CVE-2022-29804"
|
||||
CVE_CHECK_WHITELIST += "CVE-2022-30634"
|
||||
|
||||
# Issue is in golang.org/x/net/html/parse.go, not used in go compiler
|
||||
CVE_CHECK_WHITELIST += "CVE-2021-33194"
|
||||
|
||||
Reference in New Issue
Block a user