From 09898a99b42e048e7085a3df4504e887811b2349 Mon Sep 17 00:00:00 2001 From: Richard Purdie Date: Tue, 11 May 2021 12:16:12 +0100 Subject: [PATCH] bind: Exclude CVE-2019-6470 from cve-check Issue only affects dhcpd with recent bind versions. We don't ship dhcpd anymore so the issue doesn't affect us. Signed-off-by: Richard Purdie (cherry picked from commit 30106ae676124ba3c0e496a4f19c919c8418b59b) Signed-off-by: Anuj Mittal --- meta/recipes-connectivity/bind/bind_9.16.16.bb | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/meta/recipes-connectivity/bind/bind_9.16.16.bb b/meta/recipes-connectivity/bind/bind_9.16.16.bb index 27aa6221ba..b152598402 100644 --- a/meta/recipes-connectivity/bind/bind_9.16.16.bb +++ b/meta/recipes-connectivity/bind/bind_9.16.16.bb @@ -26,6 +26,10 @@ UPSTREAM_CHECK_URI = "https://ftp.isc.org/isc/bind9/" # stay at 9.16 follow the ESV versions divisible by 4 UPSTREAM_CHECK_REGEX = "(?P9.(16|20|24|28)(\.\d+)+(-P\d+)*)/" +# Issue only affects dhcpd with recent bind versions. We don't ship dhcpd anymore +# so the issue doesn't affect us. +CVE_CHECK_WHITELIST += "CVE-2019-6470" + inherit autotools update-rc.d systemd useradd pkgconfig multilib_header update-alternatives # PACKAGECONFIGs readline and libedit should NOT be set at same time -- 2.40.1