mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-05-30 00:50:00 +00:00
streamripper: ignore CVE-2020-37065
Details: https://nvd.nist.gov/vuln/detail/CVE-2020-37065 The vulnerability is about a 3rd party Windows-only GUI frontend for the streamripper library, and not for the CLI application that the recipe builds. Due to this ignore this CVE. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
@@ -30,3 +30,5 @@ EXTRA_OECONF += "\
|
|||||||
|
|
||||||
# the included argv library needs this
|
# the included argv library needs this
|
||||||
CPPFLAGS:append = " -DANSI_PROTOTYPES"
|
CPPFLAGS:append = " -DANSI_PROTOTYPES"
|
||||||
|
|
||||||
|
CVE_STATUS[CVE-2020-37065] = "cpe-incorrect: the vulnerability is about a Windows frontend, not the CLI"
|
||||||
|
|||||||
Reference in New Issue
Block a user