From 71a6d3c31775c6b2db38e194992e0ffce637c827 Mon Sep 17 00:00:00 2001 From: Richard Purdie Date: Wed, 8 Dec 2021 22:53:35 -0800 Subject: [PATCH] gcc: Add CVE-2021-37322 to the list of CVEs to ignore The CVE applies to binutils 2.26 and not to gcc so ignore there. Signed-off-by: Richard Purdie Signed-off-by: Tim Orling Signed-off-by: Steve Sakoman --- meta/recipes-devtools/gcc/gcc-9.3.inc | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/recipes-devtools/gcc/gcc-9.3.inc b/meta/recipes-devtools/gcc/gcc-9.3.inc index 235576e627..c171f673e9 100644 --- a/meta/recipes-devtools/gcc/gcc-9.3.inc +++ b/meta/recipes-devtools/gcc/gcc-9.3.inc @@ -124,3 +124,6 @@ EXTRA_OECONF_PATHS = "\ --with-sysroot=/not/exist \ --with-build-sysroot=${STAGING_DIR_TARGET} \ " + +# Is a binutils 2.26 issue, not gcc +CVE_CHECK_WHITELIST += "CVE-2021-37322" -- 2.40.1