From a4f1c6baa3258935087c8da04364720a47f5036f Mon Sep 17 00:00:00 2001 From: Shubham Kulkarni Date: Sun, 23 Apr 2023 11:25:44 +0530 Subject: [PATCH] go: Ignore CVE-2022-1705 The vulnerability was introduced in go1.15beta1 with commit d5734d4. Dunfell uses go1.14 version which does not contain the affected code. Ref: https://security-tracker.debian.org/tracker/CVE-2022-1705 (From OE-Core rev: 6e4a952efc94a3bb94216db1cbd738f4fb70217f) Signed-off-by: Shubham Kulkarni Signed-off-by: Steve Sakoman --- meta/recipes-devtools/go/go-1.14.inc | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/recipes-devtools/go/go-1.14.inc b/meta/recipes-devtools/go/go-1.14.inc index 56f4f12c37..b1d7bc155a 100644 --- a/meta/recipes-devtools/go/go-1.14.inc +++ b/meta/recipes-devtools/go/go-1.14.inc @@ -87,3 +87,6 @@ CVE_CHECK_WHITELIST += "CVE-2022-30630" # This is specific to Microsoft Windows CVE_CHECK_WHITELIST += "CVE-2022-41716" + +# Issue introduced in go1.15beta1, does not exist in 1.14 +CVE_CHECK_WHITELIST += "CVE-2022-1705"