mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-06-02 13:59:59 +00:00
spice: ignore patched CVEs
The following CVEs are already patched so we can ignore them: - CVE-2016-0749 - CVE-2016-2150 - CVE-2018-10893 This is caused by inaccurate CPE in the NVD database. Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
committed by
Khem Raj
parent
38dbdf4b23
commit
dd25c78889
@@ -30,6 +30,12 @@ SRC_URI = " \
|
|||||||
|
|
||||||
S = "${WORKDIR}/git"
|
S = "${WORKDIR}/git"
|
||||||
|
|
||||||
|
CVE_CHECK_IGNORE += "\
|
||||||
|
CVE-2016-0749 \
|
||||||
|
CVE-2016-2150 \
|
||||||
|
CVE-2018-10893 \
|
||||||
|
"
|
||||||
|
|
||||||
inherit autotools gettext python3native python3-dir pkgconfig
|
inherit autotools gettext python3native python3-dir pkgconfig
|
||||||
|
|
||||||
DEPENDS += "spice-protocol jpeg pixman alsa-lib glib-2.0 python3-pyparsing-native python3-six-native glib-2.0-native"
|
DEPENDS += "spice-protocol jpeg pixman alsa-lib glib-2.0 python3-pyparsing-native python3-six-native glib-2.0-native"
|
||||||
|
|||||||
Reference in New Issue
Block a user