]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commitdiff
python3: ignore CVE-2022-26488
authorRoss Burton <ross@burtonini.com>
Tue, 22 Mar 2022 11:19:48 +0000 (11:19 +0000)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Wed, 23 Mar 2022 12:11:15 +0000 (12:11 +0000)
This CVE is specific to Microsoft Windows, so we can ignore it.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
meta/recipes-devtools/python/python3_3.10.2.bb

index 32da2a12c8dda1b06d6b18a4bcc9841a454556b5..227a72d3953407ebaa13692328953e73fae3786b 100644 (file)
@@ -52,9 +52,8 @@ CVE_PRODUCT = "python"
 CVE_CHECK_IGNORE += "CVE-2007-4559"
 # This is not exploitable when glibc has CVE-2016-10739 fixed.
 CVE_CHECK_IGNORE += "CVE-2019-18348"
-
-# This is windows only issue.
-CVE_CHECK_IGNORE += "CVE-2020-15523"
+# These are specific to Microsoft Windows
+CVE_CHECK_IGNORE += "CVE-2020-15523 CVE-2022-26488"
 
 PYTHON_MAJMIN = "3.10"