helium-3rd-party/meta-openembedded
1
0
Fork 0
mirror of git://git.openembedded.org/meta-openembedded synced 2026-08-11 21:14:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

redis: ignore CVE-2022-3734 and CVE-2022-0543

Browse Source 
CVE-2022-3734 only affects Windows.
CVE-2022-0543 affects only packages that were packaged for Debian and
Debian-derivative distros.

Neither of these issues is present in upstream Redis.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 8f1269507ad95d56aeab3cdd0c0178e194506ca8)

Adapted to Kirkstone (CVE_STATUS -> CVE_CHECK_IGNORE)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
This commit is contained in:
Gyorgy Sarvari 2025-11-23 17:17:29 +01:00
parent 8602562caa
commit caea02d115
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
meta-oe/recipes-extended/redis/redis_6.2.12.bb
View File

@ -25,6 +25,11 @@ SRC_URI[sha256sum] = "75352eef41e97e84bfa94292cbac79e5add5345fc79787df5cbdff7033
inherit autotools-brokensep update-rc.d systemd useradd
# not-applicable-config: the vulnerability is not present in upstream, only in Debian-packaged version
CVE_CHECK_IGNORE += "CVE-2022-0543"
# not-applicable-config: only affects Windows
CVE_CHECK_IGNORE += "CVE-2022-3734"
FINAL_LIBS:x86:toolchain-clang = "-latomic"
FINAL_LIBS:riscv32:toolchain-clang = "-latomic"
FINAL_LIBS:mips = "-latomic"