From 7bd47ef6c98323c95a9e527129dca98c9a65ee08 Mon Sep 17 00:00:00 2001 From: Armin Kuster Date: Mon, 5 Jul 2021 15:33:32 -0700 Subject: dovecot: add CVE-2016-4983 to allowlist CVE-2016-4983 affects only postinstall script on specific distribution, so add it to allowlist. Signed-off-by: Yuichi Ito Signed-off-by: Khem Raj (cherry picked from commit 3613b50a84559ce771866cd1eef1141fa3e6d238) [mkcert.sh does mask 077 first] Signed-off-by: Armin Kuster (cherry picked from commit d1fb027f894921ea02c984eb581ee1500c613470) Signed-off-by: Armin Kuster --- meta-networking/recipes-support/dovecot/dovecot_2.2.36.4.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-networking/recipes-support/dovecot/dovecot_2.2.36.4.bb b/meta-networking/recipes-support/dovecot/dovecot_2.2.36.4.bb index 0f7fad2b24..e21a94ad64 100644 --- a/meta-networking/recipes-support/dovecot/dovecot_2.2.36.4.bb +++ b/meta-networking/recipes-support/dovecot/dovecot_2.2.36.4.bb @@ -67,3 +67,6 @@ FILES_${PN} += "${libdir}/dovecot/*plugin.so \ FILES_${PN}-staticdev += "${libdir}/dovecot/*/*.a" FILES_${PN}-dev += "${libdir}/dovecot/libdovecot*.so" FILES_${PN}-dbg += "${libdir}/dovecot/*/.debug" + +# CVE-2016-4983 affects only postinstall script on specific distribution +CVE_CHECK_WHITELIST += "CVE-2016-4983" -- cgit 1.2.3-korg