]> code.ossystems Code Review - openembedded-core.git/commitdiff
gcc: Add CVE-2021-37322 to the list of CVEs to ignore
authorRichard Purdie <richard.purdie@linuxfoundation.org>
Thu, 9 Dec 2021 00:12:12 +0000 (00:12 +0000)
committerAnuj Mittal <anuj.mittal@intel.com>
Fri, 10 Dec 2021 03:29:49 +0000 (11:29 +0800)
The CVE applies to binutils 2.26 and not to gcc so ignore there.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit fea2726663a3db03170c49fceaffc632c509aeea)
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
meta/recipes-devtools/gcc/gcc-11.2.inc

index 9fd30f52a88a3e245795042ca113873fcb9f5f20..cd1b022ff2f50f7ff3c47c3df6a0aa38f06c7c39 100644 (file)
@@ -117,3 +117,6 @@ EXTRA_OECONF_PATHS = "\
     --with-sysroot=/not/exist \
     --with-build-sysroot=${STAGING_DIR_TARGET} \
 "
+
+# Is a binutils 2.26 issue, not gcc
+CVE_CHECK_WHITELIST += "CVE-2021-37322"