diff options
| author |   Peter Marko <peter.marko@siemens.com> | 2023-10-31 19:03:14 +0100 |
|---|---|---|
| committer |   Steve Sakoman <steve@sakoman.com> | 2023-11-01 05:23:26 -1000 |
| commit | bf60773c882483f4bfe49e89be8e2f85f78b212b (patch) | |
| tree | fd853490c7a5f6ff48b4f35acf1512e31d77d7b3 | |
| parent | 63daa00279c0c3a8650d6e08a68cc32a2b98d843 (diff) | |
| download | openembedded-core-bf60773c882483f4bfe49e89be8e2f85f78b212b.tar.gz | |
glibc: ignore CVE-2023-4527
This vulnerability was introduced in 2.36, so 2.35 is not vulnerable.
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
| -rw-r--r-- | meta/recipes-core/glibc/glibc_2.35.bb | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/meta/recipes-core/glibc/glibc_2.35.bb b/meta/recipes-core/glibc/glibc_2.35.bb index 271520f76b..21cd99dfdd 100644 --- a/meta/recipes-core/glibc/glibc_2.35.bb +++ b/meta/recipes-core/glibc/glibc_2.35.bb @@ -16,6 +16,13 @@ CVE_CHECK_IGNORE += "CVE-2019-1010022 CVE-2019-1010023 CVE-2019-1010024" # Potential patch at https://sourceware.org/bugzilla/show_bug.cgi?id=22853 CVE_CHECK_IGNORE += "CVE-2019-1010025" +# glibc https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-4527 +# This vulnerability was introduced in 2.36 by commit +# f282cdbe7f436c75864e5640a409a10485e9abb2 resolv: Implement no-aaaa stub resolver option +# so our version is not yet vulnerable +# See https://sourceware.org/bugzilla/show_bug.cgi?id=30842 +CVE_CHECK_IGNORE += "CVE-2023-4527" + # To avoid these in cve-check reports since the recipe version did not change CVE_CHECK_IGNORE += "CVE-2023-4813 CVE-2023-4806 CVE-2023-4911 CVE-2023-5156" |