aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRichard Purdie <richard.purdie@linuxfoundation.org>2021-09-06 15:11:51 +0100
committerAlexandre Belloni <alexandre.belloni@bootlin.com>2021-09-07 19:53:57 +0200
commit83cf874f9de9cbda4d89e668617557870571c2c3 (patch)
treeef73ada924dd687190bda89786ebcdd003a93dd1
parentdc94b59977a9bb19835290e7763e222d316d035d (diff)
downloadopenembedded-core-contrib-83cf874f9de9cbda4d89e668617557870571c2c3.tar.gz
openembedded-core-contrib-83cf874f9de9cbda4d89e668617557870571c2c3.tar.bz2
openembedded-core-contrib-83cf874f9de9cbda4d89e668617557870571c2c3.zip
go: Exclude CVE-2021-29923 from report list
Upstream don't believe it is a signifiant real world issue and will only fix in 1.17 onwards. Therefore exclude it from our reports. https://github.com/golang/go/issues/30999#issuecomment-910470358 Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
-rw-r--r--meta/recipes-devtools/go/go-1.16.7.inc5
1 files changed, 5 insertions, 0 deletions
diff --git a/meta/recipes-devtools/go/go-1.16.7.inc b/meta/recipes-devtools/go/go-1.16.7.inc
index bc1cd94449..02a9268779 100644
--- a/meta/recipes-devtools/go/go-1.16.7.inc
+++ b/meta/recipes-devtools/go/go-1.16.7.inc
@@ -18,3 +18,8 @@ SRC_URI += "\
file://0009-Revert-cmd-go-make-sure-CC-and-CXX-are-absolute.patch \
"
SRC_URI[main.sha256sum] = "1a9f2894d3d878729f7045072f30becebe243524cf2fce4e0a7b248b1e0654ac"
+
+# Upstream don't believe it is a signifiant real world issue and will only
+# fix in 1.17 onwards where we can drop this.
+# https://github.com/golang/go/issues/30999#issuecomment-910470358
+CVE_CHECK_WHITELIST += "CVE-2021-29923"