mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-09-15 06:49:33 +02:00
Code Issues Packages Projects Releases Wiki Activity

gstreamer: ignore CVE-2021-3497, CVE-2021-3498, and CVE-2021-3522

Browse Source 
CPE entries for gst-plugins-* are listed as gstreamer issues
so we need to ignore the false hits for the CVEs we've patched
in plugins recipes

(From OE-Core rev: 55140153e66f13a2d8a673a48f6c21e293415e56)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Steve Sakoman
2021-07-26 04:22:32 -10:00
committed by Richard Purdie
parent 427882f470
commit 4542e5f944
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
meta/recipes-multimedia/gstreamer/gstreamer1.0_1.16.3.bb
View File

@@ -74,4 +74,13 @@ FILES_${PN}-dbg += "${datadir}/gdb ${datadir}/gstreamer-1.0/gdb"
CVE_PRODUCT = "gstreamer"
# CPE entries for gst-plugins-base are listed as gstreamer issues
# so we need to ignore the false hits
CVE_CHECK_WHITELIST += "CVE-2021-3522"
# CPE entries for gst-plugins-good are listed as gstreamer issues
# so we need to ignore the false hits
CVE_CHECK_WHITELIST += "CVE-2021-3497"
CVE_CHECK_WHITELIST += "CVE-2021-3498"
require gstreamer1.0-ptest.inc