From: Richard Purdie <richard.purdie@linuxfoundation.org>
Date: Tue, 11 May 2021 11:30:39 +0000 (+0100)
Subject: openssh: Exclude CVE-2008-3844 from cve-check
X-Git-Tag: yocto-3.3.2~120
X-Git-Url: https://code.ossystems.io/gitweb?a=commitdiff_plain;h=416230b7236c391e89d0d7941b2d34b6234f993c;p=openembedded-core.git

openssh: Exclude CVE-2008-3844 from cve-check

CVE only applies to some distributed RHEL binaries so irrelavent to us.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
---

diff --git a/meta/recipes-connectivity/openssh/openssh_8.5p1.bb b/meta/recipes-connectivity/openssh/openssh_8.5p1.bb
index 41ac303d38..c6de519884 100644
--- a/meta/recipes-connectivity/openssh/openssh_8.5p1.bb
+++ b/meta/recipes-connectivity/openssh/openssh_8.5p1.bb
@@ -34,6 +34,9 @@ CVE_CHECK_WHITELIST += "CVE-2007-2768"
 # and when running in a Kerberos environment. As such it is not relevant to OpenEmbedded
 CVE_CHECK_WHITELIST += "CVE-2014-9278"
 
+# CVE only applies to some distributed RHEL binaries
+CVE_CHECK_WHITELIST += "CVE-2008-3844"
+
 PAM_SRC_URI = "file://sshd"
 
 inherit manpages useradd update-rc.d update-alternatives systemd