diff options
author | Ross Burton <ross.burton@intel.com> | 2019-11-04 14:26:52 +0000 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2019-11-05 10:36:20 +0000 |
commit | 341e43ebd935daeb592cb073bf00f80c49a8ec2d (patch) | |
tree | 92998605829e5c59ef71360a3eaad777214262a4 /meta/recipes-multimedia | |
parent | 6e7cfd2edd7b35201478e66d47b21547a1032e30 (diff) | |
download | openembedded-core-contrib-341e43ebd935daeb592cb073bf00f80c49a8ec2d.tar.gz |
libpng: whitelist CVE-2019-17371
This is actually a memory leak in gif2png 2.x, so whitelist it in the libpng
recipe.
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-multimedia')
-rw-r--r-- | meta/recipes-multimedia/libpng/libpng_1.6.37.bb | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/meta/recipes-multimedia/libpng/libpng_1.6.37.bb b/meta/recipes-multimedia/libpng/libpng_1.6.37.bb index 66af2f3d60..2ed87a8437 100644 --- a/meta/recipes-multimedia/libpng/libpng_1.6.37.bb +++ b/meta/recipes-multimedia/libpng/libpng_1.6.37.bb @@ -29,3 +29,6 @@ PACKAGES =+ "${PN}-tools" FILES_${PN}-tools = "${bindir}/png-fix-itxt ${bindir}/pngfix ${bindir}/pngcp" BBCLASSEXTEND = "native nativesdk" + +# CVE-2019-17371 is actually a memory leak in gif2png 2.x +CVE_CHECK_WHITELIST += "CVE-2019-17371" |