summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRoss Burton <ross.burton@arm.com>2023-01-30 12:07:08 +0000
committerSteve Sakoman <steve@sakoman.com>2023-02-10 08:30:16 -1000
commit72438f0a54296a12cfd770c5c67b1e038f019dee (patch)
treeeef35c77b7f3499803410fe01997f43d52a3b72f
parentd21b033c2f8890989729bc1468254c9298f9a518 (diff)
downloadopenembedded-core-72438f0a54296a12cfd770c5c67b1e038f019dee.tar.gz
git: ignore CVE-2022-41953
This is specific to Git-for-Windows. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c8849af809e0213d43e18e5d01067eeeb61b330d) Signed-off-by: Steve Sakoman <steve@sakoman.com>
-rw-r--r--meta/recipes-devtools/git/git_2.35.6.bb2
1 files changed, 2 insertions, 0 deletions
diff --git a/meta/recipes-devtools/git/git_2.35.6.bb b/meta/recipes-devtools/git/git_2.35.6.bb
index 016b743ece..0bb4a6a021 100644
--- a/meta/recipes-devtools/git/git_2.35.6.bb
+++ b/meta/recipes-devtools/git/git_2.35.6.bb
@@ -31,6 +31,8 @@ CVE_PRODUCT = "git-scm:git"
# in mirrored git repos. Most OE users wouldn't build the docs and
# we don't see this as a major issue for our general users/usecases.
CVE_CHECK_IGNORE += "CVE-2022-24975"
+# This is specific to Git-for-Windows
+CVE_CHECK_IGNORE += "CVE-2022-41953"
PACKAGECONFIG ??= "expat curl"
PACKAGECONFIG[cvsserver] = ""