]> code.ossystems Code Review - openembedded-core.git/commitdiff
xinetd: Exclude CVE-2013-4342 from cve-check
authorRichard Purdie <richard.purdie@linuxfoundation.org>
Tue, 11 May 2021 12:17:06 +0000 (13:17 +0100)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Mon, 31 May 2021 13:36:45 +0000 (14:36 +0100)
We use the SUSE mirror of xinetd. The CVE fix was added to the main repo
after the latest release but is included in the version from the SUSE repo.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-extended/xinetd/xinetd_2.3.15.4.bb

index 2787b270fac807ebb822d91d81ad8b49b4f867a7..69d5b2f83b7763820732c450e363a4100b19b83a 100644 (file)
@@ -19,6 +19,9 @@ SRCREV = "6a4af7786630ce48747d9687e2f18f45ea6684c4"
 
 S = "${WORKDIR}/git"
 
+# https://github.com/xinetd-org/xinetd/pull/10 is merged into this git tree revision
+CVE_CHECK_WHITELIST += "CVE-2013-4342"
+
 inherit autotools update-rc.d systemd pkgconfig
 
 SYSTEMD_SERVICE_${PN} = "xinetd.service"