From d34567be6e87afdec55973f8f75be8d44b4acd1b Mon Sep 17 00:00:00 2001 From: Lee Chee Yang Date: Thu, 26 Oct 2023 13:05:54 +0800 Subject: [PATCH] kexec-tools: Ignore Fedora/RedHat specific CVE-2021-20269 Signed-off-by: Lee Chee Yang Signed-off-by: Steve Sakoman --- meta/recipes-kernel/kexec/kexec-tools_2.0.20.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/recipes-kernel/kexec/kexec-tools_2.0.20.bb b/meta/recipes-kernel/kexec/kexec-tools_2.0.20.bb index 871b36440ff..206c6ccae71 100644 --- a/meta/recipes-kernel/kexec/kexec-tools_2.0.20.bb +++ b/meta/recipes-kernel/kexec/kexec-tools_2.0.20.bb @@ -30,6 +30,9 @@ inherit autotools update-rc.d systemd export LDFLAGS = "-L${STAGING_LIBDIR}" EXTRA_OECONF = " --with-zlib=yes" +# affects kexec-tools shipped by Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47. +CVE_CHECK_WHITELIST += "CVE-2021-20269" + do_compile_prepend() { # Remove the prepackaged config.h from the source tree as it overrides # the same file generated by configure and placed in the build tree -- 2.47.3