openssl: Whitelist CVE-2019-0190

This is only a problem with older Apache versions.

(From OE-Core rev: 8e76d2508da411a1a67f3226465c83fec85dfe97)

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Adrian Bunk
2020-01-17 18:58:18 +02:00
committed by Richard Purdie
parent cd1d971e25
commit 7a8ac5c1c9

View File

@@ -205,3 +205,7 @@ RCONFLICTS_openssl-conf = "openssl10-conf"
BBCLASSEXTEND = "native nativesdk"
CVE_PRODUCT = "openssl:openssl"
# Only affects OpenSSL >= 1.1.1 in combination with Apache < 2.4.37
# Apache in meta-webserver is already recent enough
CVE_CHECK_WHITELIST += "CVE-2019-0190"