mirror of
https://git.yoctoproject.org/poky
synced 2026-04-05 08:02:25 +02:00
zlib: ignore CVE-2023-6992
This CVE is for iCPE cloudflare:zlib. Alternative to ignoring would be to limit CVE_PRODUCT, but historic CVEs already have two - gnu:zlib and zlib:zlib. So limiting it could miss future CVEs. (From OE-Core rev: 9f953a1cd832f03f0b3666168addf45fd4fc8d14) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
committed by
Richard Purdie
parent
7ca6bd8977
commit
4a6d2cfb8a
@@ -47,3 +47,4 @@ do_install_ptest() {
|
||||
BBCLASSEXTEND = "native nativesdk"
|
||||
|
||||
CVE_STATUS[CVE-2023-45853] = "not-applicable-config: we don't build minizip"
|
||||
CVE_STATUS[CVE-2023-6992] = "cpe-incorrect: this CVE is for cloudflare zlib"
|
||||
|
||||
Reference in New Issue
Block a user