From: Ross Burton <ross@burtonini.com>
Date: Wed, 23 Feb 2022 13:07:50 +0000 (+0000)
Subject: coreutils: remove obsolete ignored CVE list
X-Git-Url: https://code.ossystems.io/gitweb?a=commitdiff_plain;h=dea00faf30ec7c19b6b5ed4651b430ba3faf69ff;p=openembedded-core.git

coreutils: remove obsolete ignored CVE list

Three CVEs were meant to be ignored via CVE_WHITELIST, but that wasn't
the correct variable name.

The CPEs for those CVEs mean that they don't get picked up in our report,
so just remove the assignment.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
---

diff --git a/meta/recipes-core/coreutils/coreutils_9.0.bb b/meta/recipes-core/coreutils/coreutils_9.0.bb
index 6a97c4d5cc..e4633949f4 100644
--- a/meta/recipes-core/coreutils/coreutils_9.0.bb
+++ b/meta/recipes-core/coreutils/coreutils_9.0.bb
@@ -204,6 +204,3 @@ do_install_ptest () {
 }
 
 FILES:${PN}-ptest += "${bindir}/getlimits"
-
-# These are specific to Opensuse
-CVE_WHITELIST += "CVE-2013-0221 CVE-2013-0222 CVE-2013-0223"