mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-06-03 02:10:04 +00:00
libmad: ignore CVE-2017-11552 and CVE-2018-7263
These CVEs are for mpg321, not libmad. See Debian assessment: * https://security-tracker.debian.org/tracker/CVE-2017-11552 * https://security-tracker.debian.org/tracker/CVE-2018-7263 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
@@ -36,3 +36,6 @@ do_configure:prepend () {
|
||||
}
|
||||
|
||||
ARM_INSTRUCTION_SET = "arm"
|
||||
|
||||
CVE_STATUS[CVE-2017-11552] = "cpe-incorrect: this CVE is for mpg321, not libmad"
|
||||
CVE_STATUS[CVE-2018-7263] = "cpe-incorrect: this CVE is for mpg321, not libmad"
|
||||
|
||||
Reference in New Issue
Block a user