Peter Marko 81c18e0797 nss: ignore CVE-2022-3479
Investigation based on https://bugzilla.mozilla.org/show_bug.cgi?id=1774654 leads to following:
* fixed in 3.87
  (https://hg.mozilla.org/projects/nss/rev/a7f363511333b8062945557607691002fd6e40b9)
* changed code was introduced in 3.77
  (https://hg.mozilla.org/projects/nss/rev/be6a97823bfe10fa08e17c9584938a2d525a38da)
* NVD claims fix in 3.81, but there is no evidence for it in commit history
  (https://hg.mozilla.org/projects/nss/graph/a7f363511333b8062945557607691002fd6e40b9)
* Debian also says for old versions "nss <not-affected> (Vulnerable code not present/was introduced later)"
  (https://security-tracker.debian.org/tracker/CVE-2022-3479)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-06-04 22:29:45 -07:00
2023-05-28 16:35:00 -07:00
2023-02-01 09:11:49 -08:00
2023-06-04 22:29:45 -07:00
2019-06-15 16:45:33 -07:00
2018-08-27 10:53:58 -07:00

Collection of layers for the OE-core universe

Main layer maintainer: Khem Raj <raj.khem@gmail.com>

This repository is a collection of layers to suppliment OE-Core
with additional packages, Each layer have designated maintainer
Please see the respective READMEs in the layer subdirectories
S
Description
No description provided
Readme 112 MiB
Languages
BitBake 85.2%
Shell 6.1%
C 3%
Roff 2.1%
NASL 1.9%
Other 1.5%