diff options
| author |   Ross Burton <ross.burton@intel.com> | 2019-11-05 23:38:12 +0200 |
|---|---|---|
| committer |   Armin Kuster <akuster808@gmail.com> | 2019-11-10 13:54:34 -0800 |
| commit | a10b6e0e8d4e6b5778b5ca4db60e96ea025ea475 (patch) | |
| tree | e32dca321cd117adadaf5ae19e07def9350ee49a /meta | |
| parent | efc4236112d599a3a39376f5a5898072061efc8d (diff) | |
| download | openembedded-core-contrib-a10b6e0e8d4e6b5778b5ca4db60e96ea025ea475.tar.gz | |
libpng: whitelist CVE-2019-17371
This is actually a memory leak in gif2png 2.x, so whitelist it in the libpng
recipe.
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Diffstat (limited to 'meta')
| -rw-r--r-- | meta/recipes-multimedia/libpng/libpng_1.6.37.bb | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/meta/recipes-multimedia/libpng/libpng_1.6.37.bb b/meta/recipes-multimedia/libpng/libpng_1.6.37.bb index 66af2f3d60..2ed87a8437 100644 --- a/meta/recipes-multimedia/libpng/libpng_1.6.37.bb +++ b/meta/recipes-multimedia/libpng/libpng_1.6.37.bb @@ -29,3 +29,6 @@ PACKAGES =+ "${PN}-tools" FILES_${PN}-tools = "${bindir}/png-fix-itxt ${bindir}/pngfix ${bindir}/pngcp" BBCLASSEXTEND = "native nativesdk" + +# CVE-2019-17371 is actually a memory leak in gif2png 2.x +CVE_CHECK_WHITELIST += "CVE-2019-17371" |