mirrors/meta-openembedded
1
0
Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-06-14 05:49:57 +00:00
Code Issues Projects Releases Wiki Activity

ntp: ignore many CVEs

Browse Source 
cve-check is not able to correctly identify many of the patched
CVEs because of the non standard version number. All the ignored
CVEs were manually checked with the NVD database and deemed not
applicable to the current version.

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>
This commit is contained in:
Davide Gardenal
2022-07-04 16:58:36 +02:00
committed by Armin Kuster
parent c1e7b0b993
commit 743f6e70fa
1 changed files with 25 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
meta-networking/recipes-support/ntp/ntp_4.2.8p15.bb
+25 -1
View File
@@ -29,7 +29,31 @@ SRC_URI = "http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2/ntp-${PV}.tar.g
SRC_URI[sha256sum] = "f65840deab68614d5d7ceb2d0bb9304ff70dcdedd09abb79754a87536b849c19"
# CVE-2016-9312 is only for windows.
CVE_CHECK_IGNORE += "CVE-2016-9312"
# The other CVEs are not correctly identified because cve-check
# is not able to check the version correctly (it only checks for 4.2.8 omitting p15 that makes the difference)
CVE_CHECK_IGNORE += "\
CVE-2016-9312 \
CVE-2015-5146 \
CVE-2015-5300 \
CVE-2015-7975 \
CVE-2015-7976 \
CVE-2015-7977 \
CVE-2015-7978 \
CVE-2015-7979 \
CVE-2015-8138 \
CVE-2015-8139 \
CVE-2015-8140 \
CVE-2015-8158 \
CVE-2016-1547 \
CVE-2016-2516 \
CVE-2016-2517 \
CVE-2016-2519 \
CVE-2016-7429 \
CVE-2016-7433 \
CVE-2016-9310 \
CVE-2016-9311 \
"
inherit autotools update-rc.d useradd systemd pkgconfig