From 0fd2c13e515cb863b61a8f7751654a2510badae3 Mon Sep 17 00:00:00 2001
From: Stefan Schmidt <stefan.schmidt@huawei.com>
Date: Mon, 6 Sep 2021 16:58:32 +0200
Subject: [PATCH] wpantund: Whitelist CVE entry where issue is already fixed
The CVE issue CVE-2020-8916 has been fixed in the upstream repo for a
long time and our recipe has this commit already included.
https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-8916
Mark the CVE as such.
Signed-off-by: Stefan Schmidt <stefan.schmidt@huawei.com>
---
.../recipes-connectivity/openthread/wpantund_git.bb | 3 +++
1 file changed, 3 insertions(+)
diff --git a/meta-ohos-staging/recipes-connectivity/openthread/wpantund_git.bb b/meta-ohos-staging/recipes-connectivity/openthread/wpantund_git.bb
index df70754b..2e94ec40 100644
--- a/meta-ohos-staging/recipes-connectivity/openthread/wpantund_git.bb
+++ b/meta-ohos-staging/recipes-connectivity/openthread/wpantund_git.bb
@@ -15,6 +15,9 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=e7820bc7f7d1638a6b54fc2e8d7fb103 \
SRC_URI = "gitsm://github.com/openthread/wpantund.git;protocol=https \
"
+# CVE-2020-8916 has been fixed in commit
+# 3f108441e23e033b936e85be5b6877dd0a1fbf1c which is included in the SRCREV
+CVE_CHECK_WHITELIST = "CVE-2020-8916"
PV = "0.07.01+git${SRCPV}"
SRCREV = "bf45115f41ba2b8029eda174be2b93dea73b9261"
--
GitLab