]> code.ossystems Code Review - openembedded-core.git/commitdiff
qemu: Exclude CVE-2018-18438 from cve-check
authorRichard Purdie <richard.purdie@linuxfoundation.org>
Mon, 10 May 2021 12:36:02 +0000 (13:36 +0100)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Tue, 11 May 2021 10:53:23 +0000 (11:53 +0100)
The issues were investigated and found not to be an issue therefore
exclude from checks.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-devtools/qemu/qemu.inc

index 32be057d0ed57d197a96c5e6f119a98aa6759e0a..82d1cb5566ce1496dbffdfb79d7e3f2c4ee75ddf 100644 (file)
@@ -72,6 +72,10 @@ CVE_CHECK_WHITELIST += "CVE-2017-5957"
 # enable it by default.
 CVE_CHECK_WHITELIST += "CVE-2007-0998"
 
+# 'The issues identified by this CVE were determined to not constitute a vulnerability.'
+# https://bugzilla.redhat.com/show_bug.cgi?id=1609015#c11
+CVE_CHECK_WHITELIST += "CVE-2018-18438"
+
 COMPATIBLE_HOST_mipsarchn32 = "null"
 COMPATIBLE_HOST_mipsarchn64 = "null"