[dunfell,02/10] ninja: Whitelist CVE-2021-4336, wrong ninja

Message ID	a056017d8383686651de6a72b50d95213bacf226.1688092252.git.steve@sakoman.com
State	New, archived
Headers	show Return-Path: <steve@sakoman.com> ip: 209.85.222.169, mailfrom: steve@sakoman.com) From: Steve Sakoman <steve@sakoman.com> To: openembedded-core@lists.openembedded.org Subject: [OE-core][dunfell 02/10] ninja: Whitelist CVE-2021-4336, wrong ninja Date: Thu, 29 Jun 2023 16:33:15 -1000 Message-Id: <a056017d8383686651de6a72b50d95213bacf226.1688092252.git.steve@sakoman.com> In-Reply-To: <cover.1688092252.git.steve@sakoman.com> References: <cover.1688092252.git.steve@sakoman.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[dunfell,01/10] libjpeg-turbo: CVE-2020-35538 Null pointer dereference in jcopy_sample_rows() function \| expand [dunfell,01/10] libjpeg-turbo: CVE-2020-35538 Null pointer dereference in jcopy_sample_rows() funct… [dunfell,02/10] ninja: Whitelist CVE-2021-4336, wrong ninja [dunfell,03/10] go: Backport fix CVE-2023-29405 [dunfell,04/10] go: fix CVE-2023-29402 & CVE-2023-29404 [dunfell,05/10] libcap: backport Debian patches to fix CVE-2023-2602 and CVE-2023-2603 [dunfell,06/10] linux-yocto/5.4: update to v5.4.246 [dunfell,07/10] linux-yocto/5.4: update to v5.4.247 [dunfell,08/10] linux-yocto/5.4: update to v5.4.248 [dunfell,09/10] linux-yocto-rt/54: fix 5.4-rt build breakage [dunfell,10/10] linux-yocto/5.4: cfg: fix DECNET configuration warning

Message ID

a056017d8383686651de6a72b50d95213bacf226.1688092252.git.steve@sakoman.com

State

New, archived

Headers

From: Steve Sakoman <steve@sakoman.com>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][dunfell 02/10] ninja: Whitelist CVE-2021-4336, wrong ninja
Date: Thu, 29 Jun 2023 16:33:15 -1000
Message-Id: 
 <a056017d8383686651de6a72b50d95213bacf226.1688092252.git.steve@sakoman.com>
In-Reply-To: <cover.1688092252.git.steve@sakoman.com>
References: <cover.1688092252.git.steve@sakoman.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[dunfell,01/10] libjpeg-turbo: CVE-2020-35538 Null pointer dereference in jcopy_sample_rows() function | expand

Commit Message

Steve Sakoman June 30, 2023, 2:33 a.m. UTC

From: Ross Burton <ross.burton@arm.com>

(From OE-Core rev: c2dd2c13ff26c3f046e35a2f6b8afeb099ef422a)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 9a106486ad7900924a87c5869702903204a35b54)
Signed-off-by: virendra thakur <virendrak@kpit.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
 meta/recipes-devtools/ninja/ninja_1.10.0.bb | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/meta/recipes-devtools/ninja/ninja_1.10.0.bb b/meta/recipes-devtools/ninja/ninja_1.10.0.bb
index ae3f3f1ea8..755b73a173 100644
--- a/meta/recipes-devtools/ninja/ninja_1.10.0.bb
+++ b/meta/recipes-devtools/ninja/ninja_1.10.0.bb
@@ -29,3 +29,6 @@  do_install() {
 }
 
 BBCLASSEXTEND = "native nativesdk"
+
+# This is a different Ninja
+CVE_CHECK_WHITELIST += "CVE-2021-4336"

[dunfell,02/10] ninja: Whitelist CVE-2021-4336, wrong ninja

Commit Message

Patch