]> code.ossystems Code Review - openembedded-core.git/commitdiff
cups: Mark CVE-2009-0032 as a non-issue
authorRichard Purdie <richard.purdie@linuxfoundation.org>
Sun, 20 Dec 2020 23:55:12 +0000 (23:55 +0000)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 1 Jan 2021 11:55:26 +0000 (11:55 +0000)
The CVE was against a cups plugin which is obsolete and we don't include.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 5f7cb9f6ec4b14f992d265b8c67a9f5589f9b842)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-extended/cups/cups.inc

index 9b4b2a9b13a2a6f435e331d441167d5da644ce40..509c80c31369f0bab836769aeb8645900ade08da 100644 (file)
@@ -18,6 +18,8 @@ SRC_URI = "https://github.com/apple/cups/releases/download/v${PV}/${BP}-source.t
 UPSTREAM_CHECK_URI = "https://github.com/apple/cups/releases"
 UPSTREAM_CHECK_REGEX = "cups-(?P<pver>\d+\.\d+(\.\d+)?)-source.tar"
 
+# Issue affects pdfdistiller plugin used with but not part of cups
+CVE_CHECK_WHITELIST += "CVE-2009-0032"
 # This is an Ubuntu only issue.
 CVE_CHECK_WHITELIST += "CVE-2018-6553"