From: Adrian Bunk <bunk@stusta.de>
Date: Mon, 4 Nov 2019 20:55:04 +0000 (+0200)
Subject: lz4: Whitelist CVE-2014-4715
X-Git-Tag: lucaceresoli/bug-15201-perf-libtraceevent-missing~12842
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ccb65286b955d44dacd5fc794851a0c313d116a6;p=thirdparty%2Fopenembedded%2Fopenembedded-core-contrib.git

lz4: Whitelist CVE-2014-4715

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
---

diff --git a/meta/recipes-support/lz4/lz4_1.9.2.bb b/meta/recipes-support/lz4/lz4_1.9.2.bb
index f0a8416a96d..ed4452c82ec 100644
--- a/meta/recipes-support/lz4/lz4_1.9.2.bb
+++ b/meta/recipes-support/lz4/lz4_1.9.2.bb
@@ -18,6 +18,9 @@ UPSTREAM_CHECK_GITTAGREGEX = "v(?P<pver>.*)"
 
 S = "${WORKDIR}/git"
 
+# Fixed in r118, which is larger than the current version.
+CVE_CHECK_WHITELIST += "CVE-2014-4715"
+
 EXTRA_OEMAKE = "PREFIX=${prefix} CC='${CC}' DESTDIR=${D} LIBDIR=${libdir} INCLUDEDIR=${includedir}"
 
 do_install() {