summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRoss Burton <ross.burton@arm.com>2022-09-21 16:51:25 +0100
committerRichard Purdie <richard.purdie@linuxfoundation.org>2022-09-22 11:25:33 +0100
commitebb0220bf211ec1318a0a7f6a9ab80cf7775a848 (patch)
tree4cf41671fb8bfdbebf3e46c2d2b5664b61320a0d
parentfa61290f5ea812bc09ccc8dd7dda064c651bb039 (diff)
downloadopenembedded-core-contrib-ebb0220bf211ec1318a0a7f6a9ab80cf7775a848.tar.gz
glibc: mark a CVE where we have merged the fix
The fix for this CVE has been merged into the 2.36 branch and fixed in oe-core as of 055ce284. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
-rw-r--r--meta/recipes-core/glibc/glibc_2.36.bb3
1 files changed, 3 insertions, 0 deletions
diff --git a/meta/recipes-core/glibc/glibc_2.36.bb b/meta/recipes-core/glibc/glibc_2.36.bb
index 1cfa8101ef..45bc784b33 100644
--- a/meta/recipes-core/glibc/glibc_2.36.bb
+++ b/meta/recipes-core/glibc/glibc_2.36.bb
@@ -16,6 +16,9 @@ CVE_CHECK_IGNORE += "CVE-2019-1010022 CVE-2019-1010023 CVE-2019-1010024"
# Potential patch at https://sourceware.org/bugzilla/show_bug.cgi?id=22853
CVE_CHECK_IGNORE += "CVE-2019-1010025"
+# This has been integrated into the 2.36 branch as of c399271 so is now fixed
+CVE_CHECK_IGNORE += "CVE-2022-39046"
+
DEPENDS += "gperf-native bison-native"
NATIVESDKFIXES ?= ""