From: Ross Burton <ross.burton@arm.com>
Date: Wed, 21 Sep 2022 15:51:25 +0000 (+0100)
Subject: glibc: mark a CVE where we have merged the fix
X-Git-Tag: lucaceresoli/bug-15201-perf-libtraceevent-missing~2887
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=ebb0220bf211ec1318a0a7f6a9ab80cf7775a848;p=thirdparty%2Fopenembedded%2Fopenembedded-core-contrib.git

glibc: mark a CVE where we have merged the fix

The fix for this CVE has been merged into the 2.36 branch and fixed in
oe-core as of 055ce284.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
---

diff --git a/meta/recipes-core/glibc/glibc_2.36.bb b/meta/recipes-core/glibc/glibc_2.36.bb
index 1cfa8101efa..45bc784b337 100644
--- a/meta/recipes-core/glibc/glibc_2.36.bb
+++ b/meta/recipes-core/glibc/glibc_2.36.bb
@@ -16,6 +16,9 @@ CVE_CHECK_IGNORE += "CVE-2019-1010022 CVE-2019-1010023 CVE-2019-1010024"
 # Potential patch at https://sourceware.org/bugzilla/show_bug.cgi?id=22853
 CVE_CHECK_IGNORE += "CVE-2019-1010025"
 
+# This has been integrated into the 2.36 branch as of c399271 so is now fixed
+CVE_CHECK_IGNORE += "CVE-2022-39046"
+
 DEPENDS += "gperf-native bison-native"
 
 NATIVESDKFIXES ?= ""