From: Adrian Bunk <bunk@stusta.de>
Date: Sun, 17 Nov 2019 23:23:37 +0000 (+0800)
Subject: iputils: Whitelist CVE-2000-1213 CVE-2000-1214
X-Git-Tag: 2019-10.1-zeus~39
X-Git-Url: https://code.ossystems.io/gitweb?a=commitdiff_plain;h=6431e869998baa1ddfe04d2d1fb7a81f60725ed2;p=openembedded-core.git

iputils: Whitelist CVE-2000-1213 CVE-2000-1214

(From OE-Core rev: 9fea7c3fae30bb1eecb31ec3bf777db981dc1eed)

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
---

diff --git a/meta/recipes-extended/iputils/iputils_s20190709.bb b/meta/recipes-extended/iputils/iputils_s20190709.bb
index d8f2470d0c..3f9e9917f0 100644
--- a/meta/recipes-extended/iputils/iputils_s20190709.bb
+++ b/meta/recipes-extended/iputils/iputils_s20190709.bb
@@ -17,6 +17,10 @@ S = "${WORKDIR}/git"
 
 UPSTREAM_CHECK_GITTAGREGEX = "(?P<pver>s\d+)"
 
+# Fixed in 2000-10-10, but the versioning of iputils
+# breaks the version order.
+CVE_CHECK_WHITELIST += "CVE-2000-1213 CVE-2000-1214"
+
 PACKAGECONFIG ??= "libcap libgcrypt rarpd traceroute6"
 PACKAGECONFIG[libcap] = "-DUSE_CAP=true, -DUSE_CAP=false, libcap"
 PACKAGECONFIG[libgcrypt] = "-DUSE_CRYPTO=gcrypt, -DUSE_CRYPTO=none, libgcrypt"