From cbe4c7c3023c0e801aa11a5ae3dda567baef384b Mon Sep 17 00:00:00 2001 From: Marta Rybczynska <marta.rybczynska@huawei.com> Date: Mon, 29 Nov 2021 20:03:30 +0100 Subject: [PATCH] jansson: whitelist CVE-2020-36325 According to the upstream [1], the bug happens only if the programmer does not follow the API definition. [1] https://github.com/akheron/jansson/issues/548 Upstream-Status: Pending Signed-off-by: Marta Rybczynska <marta.rybczynska@huawei.com> --- .../recipes-extended/jansson/jansson_2.13.1.bbappend | 2 ++ 1 file changed, 2 insertions(+) create mode 100644 meta-oniro-staging/recipes-extended/jansson/jansson_2.13.1.bbappend diff --git a/meta-oniro-staging/recipes-extended/jansson/jansson_2.13.1.bbappend b/meta-oniro-staging/recipes-extended/jansson/jansson_2.13.1.bbappend new file mode 100644 index 00000000..c2a542cf --- /dev/null +++ b/meta-oniro-staging/recipes-extended/jansson/jansson_2.13.1.bbappend @@ -0,0 +1,2 @@ +# upstream considers it isn't a real bug https://github.com/akheron/jansson/issues/548 +CVE_CHECK_WHITELIST = "CVE-2020-36325 " -- GitLab