From 4a4f2b6df02b0051da0a54e45f4084027fcacd3d Mon Sep 17 00:00:00 2001 From: Sanjay Chitroda Date: Sat, 27 May 2023 22:52:52 -0700 Subject: [PATCH] sqlite3: Whitelist CVE-2022-21227 This CVE is applicable to "SQLite3 bindings for Node.js" only. References: https://nvd.nist.gov/vuln/detail/CVE-2022-21227 (From OE-Core rev: cfc42fdabb3f12eb4ac5069a549ba5699385dfdc) Signed-off-by: Sanjay Chitroda Signed-off-by: Richard Purdie --- meta/recipes-support/sqlite/sqlite3_3.41.2.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/recipes-support/sqlite/sqlite3_3.41.2.bb b/meta/recipes-support/sqlite/sqlite3_3.41.2.bb index b09e8e7f55..11bc8bb4c0 100644 --- a/meta/recipes-support/sqlite/sqlite3_3.41.2.bb +++ b/meta/recipes-support/sqlite/sqlite3_3.41.2.bb @@ -12,3 +12,6 @@ CVE_CHECK_IGNORE += "CVE-2019-19242" CVE_CHECK_IGNORE += "CVE-2015-3717" # Issue in an experimental extension we don't have/use. Fixed by https://sqlite.org/src/info/b1e0c22ec981cf5f CVE_CHECK_IGNORE += "CVE-2021-36690" +# As per https://nvd.nist.gov/vuln/detail/CVE-2022-21227 +# this bug is applicable to SQLite3 Node.js +CVE_CHECK_IGNORE += "CVE-2022-21227"