aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorDavide Gardenal <davidegarde2000@gmail.com>2023-11-14 18:06:54 +0100
committerArmin Kuster <akuster808@gmail.com>2023-11-14 19:04:19 -0500
commit13646f9380292409dc2953e64c71da11168e2d9d (patch)
tree86a53300a07e25dc94f90c4e953227ef592bf46d
parent50871a3630f305bcb0c149656e7a29079f5b1322 (diff)
downloadmeta-openembedded-contrib-13646f9380292409dc2953e64c71da11168e2d9d.tar.gz
openflow: ignore CVE-2018-1078
CVE-2018-1078 is not for openflow but in the NVD database the CVE is for a specific implementation that we don't have so we can ignore it. Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> (cherry picked from commit c1e7b0b993c294d52737e8e631badb5aaaefd2e3) Backported: Changed CVE_CHECK_IGNORE to CVE_CHECK_WHITELIST Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Armin Kuster <akuster808@gmail.com>
-rw-r--r--meta-networking/recipes-protocols/openflow/openflow.inc4
1 files changed, 4 insertions, 0 deletions
diff --git a/meta-networking/recipes-protocols/openflow/openflow.inc b/meta-networking/recipes-protocols/openflow/openflow.inc
index ab538c620e..c425b48e19 100644
--- a/meta-networking/recipes-protocols/openflow/openflow.inc
+++ b/meta-networking/recipes-protocols/openflow/openflow.inc
@@ -35,3 +35,7 @@ do_install_append() {
# Remove /var/run as it is created on startup
rm -rf ${D}${localstatedir}/run
}
+
+# This CVE is not for this product but cve-check assumes it is
+# because two CPE collides when checking the NVD database
+CVE_CHECK_WHITELIST = "CVE-2018-1078"