From da4ed302c4afefb16453dcdfe0deb51e9a648826 Mon Sep 17 00:00:00 2001 From: Akifumi Chikazawa Date: Fri, 25 Jun 2021 15:51:23 +0900 Subject: openvpn: add CVE-2020-7224 and CVE-2020-27569 to allowlist CVE-2020-7224 and CVE-2020-27569 are for Aviatrix OpenVPN client, not for openvpn. Signed-off-by: Akifumi Chikazawa Signed-off-by: Khem Raj (cherry picked from commit d49e96aac4616c439a2d778b95a793037dac884e) Signed-off-by: Armin Kuster --- meta-networking/recipes-support/openvpn/openvpn_2.5.2.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-networking/recipes-support/openvpn/openvpn_2.5.2.bb b/meta-networking/recipes-support/openvpn/openvpn_2.5.2.bb index f82107dbee..646f0387ad 100644 --- a/meta-networking/recipes-support/openvpn/openvpn_2.5.2.bb +++ b/meta-networking/recipes-support/openvpn/openvpn_2.5.2.bb @@ -17,6 +17,9 @@ UPSTREAM_CHECK_URI = "https://openvpn.net/community-downloads" SRC_URI[md5sum] = "7643f135b49aee49df7d83c1f434dc4e" SRC_URI[sha256sum] = "b9d295988b34e39964ac475b619c3585d667b36c350cf1adec19e5e3c843ba11" +# CVE-2020-7224 and CVE-2020-27569 are for Aviatrix OpenVPN client, not for openvpn. +CVE_CHECK_WHITELIST += "CVE-2020-7224 CVE-2020-27569" + SYSTEMD_SERVICE_${PN} += "openvpn@loopback-server.service openvpn@loopback-client.service" SYSTEMD_AUTO_ENABLE = "disable" -- cgit 1.2.3-korg