]> code.ossystems Code Review - openembedded-core.git/commit
tar: ignore node-tar CVEs
authorArmin Kuster <akuster808@gmail.com>
Sun, 12 Sep 2021 16:27:32 +0000 (09:27 -0700)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 24 Sep 2021 09:17:24 +0000 (10:17 +0100)
commita84267dfe713b85f039c35549a00708d92654ded
treef5391683c70d49c3292c60e251e9844d3af5ba77
parent5232aa1c46380e7197098bed39fc6d5b8456caa7
tar: ignore node-tar CVEs

These three CVEs are specific to the Node package node-tar.

exclude: CVE-2021-37701 CVE-2021-37712 CVE-2021-37713

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 9f9317a02d73c1e5aea026683a037e52c996c7bb)
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-extended/tar/tar_1.34.bb