]> code.ossystems Code Review - openembedded-core.git/commitdiff
grub: Exclude CVE-2019-14865 from cve-check
authorRichard Purdie <richard.purdie@linuxfoundation.org>
Thu, 20 May 2021 17:37:34 +0000 (18:37 +0100)
committerSteve Sakoman <steve@sakoman.com>
Sat, 29 May 2021 00:22:21 +0000 (14:22 -1000)
The CVE only applies to RHEL.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 8cfc3ebe50facb7e34e778f3e264b26cfae20a04)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-bsp/grub/grub2.inc

index 2c55852ef0c79eacbc61af8c36635597bee8af7d..180e3752f86d4421b954e88f79859af643ab3251 100644 (file)
@@ -13,6 +13,9 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=d32239bcb673463ab874e80d47fae504"
 
 CVE_PRODUCT = "grub2"
 
+# Applies only to RHEL
+CVE_CHECK_WHITELIST += "CVE-2019-14865"
+
 SRC_URI = "${GNU_MIRROR}/grub/grub-${PV}.tar.gz \
            file://0001-Disable-mfpmath-sse-as-well-when-SSE-is-disabled.patch \
            file://autogen.sh-exclude-pc.patch \