From 85460656d93487544758e12bf42b945d82dad509 Mon Sep 17 00:00:00 2001 From: Matsunaga-Shinji Date: Tue, 5 Apr 2022 14:03:10 +0900 Subject: [PATCH] libzip: add CVE-2017-12858 to allowlist Patch for CVE-2017-12858 is applied in version 1.2.0. Signed-off-by: matsunaga-shinji Signed-off-by: Khem Raj --- meta-oe/recipes-extended/libzip/libzip_1.8.0.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-oe/recipes-extended/libzip/libzip_1.8.0.bb b/meta-oe/recipes-extended/libzip/libzip_1.8.0.bb index 23ac76a2d2..71072a5927 100644 --- a/meta-oe/recipes-extended/libzip/libzip_1.8.0.bb +++ b/meta-oe/recipes-extended/libzip/libzip_1.8.0.bb @@ -22,3 +22,6 @@ inherit cmake SRC_URI = "https://libzip.org/download/libzip-${PV}.tar.xz" SRC_URI[sha256sum] = "f0763bda24ba947e80430be787c4b068d8b6aa6027a26a19923f0acfa3dac97e" + +# Patch for CVE-2017-12858 is applied in version 1.2.0. +CVE_CHECK_IGNORE += "CVE-2017-12858"