mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-05-04 22:39:49 +02:00
Code Issues Packages Projects Releases Wiki Activity

grub2: Add CVE whitelist entries for issues fixed in 2.06

Browse Source 
We're using a pre-release version of 2.06 so these issues are fixed but
continue to show up in the checks since it is pre-2.06 and the CPE
entries are "before but excluding 2.06".

Adding these will clean up CVE reports until the 2.06 release comes out.

(From OE-Core rev: 2467ab1554bee3a431636046735e8e369e865bc6)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Richard Purdie
2021-05-09 18:44:27 +01:00
parent 4638576d10
commit 1c926417e1
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
meta/recipes-bsp/grub/grub2.inc
View File

@@ -27,6 +27,13 @@ SRC_URI[sha256sum] = "2c87f1f21e2ab50043e6cd9163c08f1b6c3a6171556bf23ff9ed65b074
REALPV = "2.06~rc1"
PV = "2.04+${REALPV}"
# Fixed in 2.06~rc1, can be removed for 2.06 final
CVE_CHECK_WHITELIST += "\
CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-10713 \
CVE-2020-14372 CVE-2020-15705 CVE-2020-15706 CVE-2020-15707 \
CVE-2020-25632 CVE-2020-25647 CVE-2020-27749 CVE-2020-27779 \
CVE-2021-3418 CVE-2021-20225 CVE-2021-20233"
S = "${WORKDIR}/grub-${REALPV}"
UPSTREAM_CHECK_URI = "${GNU_MIRROR}/grub"