From: Richard Purdie <richard.purdie@linuxfoundation.org>
Date: Tue, 11 May 2021 12:12:26 +0000 (+0100)
Subject: cpio: Exclude CVE-2010-4226 from cve-check
X-Git-Tag: lucaceresoli/bug-15201-perf-libtraceevent-missing~7867
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=915b38c54a7932744a9f56713d1c6bd00a789331;p=thirdparty%2Fopenembedded%2Fopenembedded-core-contrib.git

cpio: Exclude CVE-2010-4226 from cve-check

Issue applies to use of cpio in SUSE/OBS, doesn't apply to us.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
---

diff --git a/meta/recipes-extended/cpio/cpio_2.13.bb b/meta/recipes-extended/cpio/cpio_2.13.bb
index 94d86100c74..f4df826ed9c 100644
--- a/meta/recipes-extended/cpio/cpio_2.13.bb
+++ b/meta/recipes-extended/cpio/cpio_2.13.bb
@@ -16,6 +16,9 @@ SRC_URI[sha256sum] = "e87470d9c984317f658567c03bfefb6b0c829ff17dbf6b0de48d71a4c8
 
 inherit autotools gettext texinfo
 
+# Issue applies to use of cpio in SUSE/OBS, doesn't apply to us
+CVE_CHECK_WHITELIST += "CVE-2010-4226"
+
 EXTRA_OECONF += "DEFAULT_RMT_DIR=${sbindir}"
 
 do_install () {