summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRoss Burton <ross.burton@arm.com>2022-06-29 16:15:18 +0100
committerSteve Sakoman <steve@sakoman.com>2022-07-01 06:23:58 -1000
commit8eb224d3160e8483c2bc6ffa207a2b6fc8644c6f (patch)
tree1e57835e580f992041bbe50c307d7ef02639d790
parent4bc6bb36dba96a534998928959acf637f9360775 (diff)
downloadopenembedded-core-contrib-8eb224d3160e8483c2bc6ffa207a2b6fc8644c6f.tar.gz
cups: ignore CVE-2022-26691
This is fixed in 2.4.2, which we have, but the complex CPE in that CVE isn't parsed by cve-check correctly so it thinks that we're vulnerable. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b40dd920f8b40eabe78db363249257818c63c074) Signed-off-by: Steve Sakoman <steve@sakoman.com>
-rw-r--r--meta/recipes-extended/cups/cups.inc2
1 files changed, 2 insertions, 0 deletions
diff --git a/meta/recipes-extended/cups/cups.inc b/meta/recipes-extended/cups/cups.inc
index 8f2ad8a009..4592980766 100644
--- a/meta/recipes-extended/cups/cups.inc
+++ b/meta/recipes-extended/cups/cups.inc
@@ -26,6 +26,8 @@ CVE_CHECK_IGNORE += "CVE-2008-1033"
CVE_CHECK_IGNORE += "CVE-2009-0032"
# This is an Ubuntu only issue.
CVE_CHECK_IGNORE += "CVE-2018-6553"
+# This is fixed in 2.4.2 but the cve-check class still reports it
+CVE_CHECK_IGNORE += "CVE-2022-26691"
LEAD_SONAME = "libcupsdriver.so"