]> code.ossystems Code Review - openembedded-core.git/commit
tar: ignore node-tar CVEs
authorArmin Kuster <akuster808@gmail.com>
Sun, 12 Sep 2021 16:27:32 +0000 (09:27 -0700)
committerSteve Sakoman <steve@sakoman.com>
Fri, 24 Sep 2021 14:27:46 +0000 (04:27 -1000)
commit8653ed5bc02c794944372be5c4ba785a7739f6d0
treefa0d3094b727e9c27a95fe3758c147e8ea65d1dd
parent48303d1c93cfcadf80830d07597805cc41d5f7e9
tar: ignore node-tar CVEs

These three CVEs are specific to the Node package node-tar.

exclude: CVE-2021-37701 CVE-2021-37712 CVE-2021-37713

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 9f9317a02d73c1e5aea026683a037e52c996c7bb)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-extended/tar/tar_1.32.bb