]> code.ossystems Code Review - openembedded-core.git/commitdiff
gcc: Add CVE-2021-37322 to the list of CVEs to ignore
authorRichard Purdie <richard.purdie@linuxfoundation.org>
Thu, 9 Dec 2021 06:53:35 +0000 (22:53 -0800)
committerSteve Sakoman <steve@sakoman.com>
Fri, 10 Dec 2021 15:43:04 +0000 (05:43 -1000)
The CVE applies to binutils 2.26 and not to gcc so ignore there.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-devtools/gcc/gcc-9.3.inc

index 235576e627e357913e825cd9054c2cf3b7eb6615..c171f673e98cbedb4225c01519e323bce59dee56 100644 (file)
@@ -124,3 +124,6 @@ EXTRA_OECONF_PATHS = "\
     --with-sysroot=/not/exist \
     --with-build-sysroot=${STAGING_DIR_TARGET} \
 "
+
+# Is a binutils 2.26 issue, not gcc
+CVE_CHECK_WHITELIST += "CVE-2021-37322"