openldap: add CVE-2015-3276 to allowlist

Message ID TY2PR01MB3289EAE650652B4AAF588E11923D9@TY2PR01MB3289.jpnprd01.prod.outlook.com
State New
Headers show
Series openldap: add CVE-2015-3276 to allowlist | expand

Commit Message

Shinji Matsunaga Feb. 24, 2022, 8:40 a.m. UTC
Ping.

-----Original Message-----
From: Matsunaga-Shinji <shin.matsunaga@fujitsu.com> 
Sent: Monday, February 7, 2022 9:31 AM
To: openembedded-devel@lists.openembedded.org
Cc: Matsunaga, Shinji/松永 慎司 <shin.matsunaga@fujitsu.com>
Subject: [PATCH] openldap: add CVE-2015-3276 to allowlist

CVE-2015-3276 has no target code.

Signed-off-by: Matsunaga-Shinji <shin.matsunaga@fujitsu.com>
---
 meta-oe/recipes-support/openldap/openldap_2.5.9.bb | 3 +++
 1 file changed, 3 insertions(+)

Comments

Khem Raj Feb. 24, 2022, 5 p.m. UTC | #1
On Thu, Feb 24, 2022 at 12:40 AM Matsunaga-Shinji
<shin.matsunaga@fujitsu.com> wrote:
>
> Ping.
>
> -----Original Message-----
> From: Matsunaga-Shinji <shin.matsunaga@fujitsu.com>
> Sent: Monday, February 7, 2022 9:31 AM
> To: openembedded-devel@lists.openembedded.org
> Cc: Matsunaga, Shinji/松永 慎司 <shin.matsunaga@fujitsu.com>
> Subject: [PATCH] openldap: add CVE-2015-3276 to allowlist
>
> CVE-2015-3276 has no target code.
>
> Signed-off-by: Matsunaga-Shinji <shin.matsunaga@fujitsu.com>
> ---
>  meta-oe/recipes-support/openldap/openldap_2.5.9.bb | 3 +++
>  1 file changed, 3 insertions(+)
>
> diff --git a/meta-oe/recipes-support/openldap/openldap_2.5.9.bb b/meta-oe/recipes-support/openldap/openldap_2.5.9.bb
> index f3b8c6c98..a170b135f 100644
> --- a/meta-oe/recipes-support/openldap/openldap_2.5.9.bb
> +++ b/meta-oe/recipes-support/openldap/openldap_2.5.9.bb
> @@ -236,3 +236,6 @@ python populate_packages:prepend () {  }
>
>  BBCLASSEXTEND = "native"
> +
> +# CVE-2015-3276 has no target code.
> +CVE_CHECK_WHITELIST += "CVE-2015-3276"

this needed to be called CVE_CHECK_IGNORE, I have fixed it locally and
oindtaslled this patch

> --
> 2.17.1
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#95502): https://lists.openembedded.org/g/openembedded-devel/message/95502
> Mute This Topic: https://lists.openembedded.org/mt/89361403/1997914
> Group Owner: openembedded-devel+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [raj.khem@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>

Patch

diff --git a/meta-oe/recipes-support/openldap/openldap_2.5.9.bb b/meta-oe/recipes-support/openldap/openldap_2.5.9.bb
index f3b8c6c98..a170b135f 100644
--- a/meta-oe/recipes-support/openldap/openldap_2.5.9.bb
+++ b/meta-oe/recipes-support/openldap/openldap_2.5.9.bb
@@ -236,3 +236,6 @@  python populate_packages:prepend () {  }
 
 BBCLASSEXTEND = "native"
+
+# CVE-2015-3276 has no target code.
+CVE_CHECK_WHITELIST += "CVE-2015-3276"
--
2.17.1