]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commitdiff
glibc: mark a CVE where we have merged the fix
authorRoss Burton <ross.burton@arm.com>
Wed, 21 Sep 2022 15:51:25 +0000 (16:51 +0100)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Thu, 22 Sep 2022 10:25:33 +0000 (11:25 +0100)
The fix for this CVE has been merged into the 2.36 branch and fixed in
oe-core as of 055ce284.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-core/glibc/glibc_2.36.bb

index 1cfa8101efaea0420c3f81a49096319095a4487b..45bc784b3372debdc15265e532b1acf1a9d80a5c 100644 (file)
@@ -16,6 +16,9 @@ CVE_CHECK_IGNORE += "CVE-2019-1010022 CVE-2019-1010023 CVE-2019-1010024"
 # Potential patch at https://sourceware.org/bugzilla/show_bug.cgi?id=22853
 CVE_CHECK_IGNORE += "CVE-2019-1010025"
 
+# This has been integrated into the 2.36 branch as of c399271 so is now fixed
+CVE_CHECK_IGNORE += "CVE-2022-39046"
+
 DEPENDS += "gperf-native bison-native"
 
 NATIVESDKFIXES ?= ""