]> code.ossystems Code Review - openembedded-core.git/commitdiff
cups: Mark CVE-2009-0032 as a non-issue
authorRichard Purdie <richard.purdie@linuxfoundation.org>
Sun, 20 Dec 2020 23:55:12 +0000 (23:55 +0000)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Mon, 21 Dec 2020 22:29:08 +0000 (22:29 +0000)
The CVE was against a cups plugin which is obsolete and we don't include.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-extended/cups/cups.inc

index df8d4d284a9e03b13ed700c1a9cd0d2b80549329..91e73d75e43686644f9d865bb5517b4ad385a272 100644 (file)
@@ -20,6 +20,8 @@ SRC_URI = "https://github.com/apple/cups/releases/download/v${PV}/${BP}-source.t
 UPSTREAM_CHECK_URI = "https://github.com/apple/cups/releases"
 UPSTREAM_CHECK_REGEX = "cups-(?P<pver>\d+\.\d+(\.\d+)?)-source.tar"
 
+# Issue affects pdfdistiller plugin used with but not part of cups
+CVE_CHECK_WHITELIST += "CVE-2009-0032"
 # This is an Ubuntu only issue.
 CVE_CHECK_WHITELIST += "CVE-2018-6553"