meta-oe: ignore patched CVEs

Some old CVEs don't have a vulnerable version range in the NVD database,
this causes come mismatch with cve-check. Ignore many CVEs that are
picked up by the class but are patched in our products.

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit efa12676dd)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
This commit is contained in:
Davide Gardenal authored and Armin Kuster committed 2022-07-21 07:17:15 -07:00
1 parent cd54a3b37d
commit bd8f5fa080
9 files changed
+37

No files matched your search

@@ -18,6 +18,10 @@ SRC_URI[sha256sum] = "53e15a2b5c1bc80161d42e9f69792a3fa18332b7b771910131004eb520
S = "${WORKDIR}/imap-${PV}"
CVE_CHECK_IGNORE += "\
CVE-2005-0198 \
"
PACKAGECONFIG ??= "${@bb.utils.filter('DISTRO_FEATURES', 'pam', d)}"
PACKAGECONFIG[pam] = ",,libpam"