[dunfell,09/18] coreutils: remove obsolete ignored CVE list

Message ID	c50688e1d0839d71e05a0d15dd948113d2ef83f6.1646406001.git.steve@sakoman.com
State	Accepted, archived
Commit	c50688e1d0839d71e05a0d15dd948113d2ef83f6
Headers	show Return-Path: <steve@sakoman.com> ip: 209.85.216.41, mailfrom: steve@sakoman.com) From: Steve Sakoman <steve@sakoman.com> To: openembedded-core@lists.openembedded.org Subject: [OE-core][dunfell 09/18] coreutils: remove obsolete ignored CVE list Date: Fri, 4 Mar 2022 05:04:17 -1000 Message-Id: <c50688e1d0839d71e05a0d15dd948113d2ef83f6.1646406001.git.steve@sakoman.com> In-Reply-To: <cover.1646406001.git.steve@sakoman.com> References: <cover.1646406001.git.steve@sakoman.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[dunfell,01/18] libarchive: Fix for CVE-2021-36976 \| expand [dunfell,01/18] libarchive: Fix for CVE-2021-36976 [dunfell,02/18] go: fix CVE-2022-23806 [dunfell,03/18] go: fix CVE-2022-23772 [dunfell,04/18] expat: fix CVE-2022-25235 [dunfell,05/18] expat: fix CVE-2022-25236 [dunfell,06/18] expat: fix CVE-2022-25313 [dunfell,07/18] expat: fix CVE-2022-25314 [dunfell,08/18] expat: fix CVE-2022-25315 [dunfell,09/18] coreutils: remove obsolete ignored CVE list [dunfell,10/18] cve-check: get_cve_info should open the database read-only [dunfell,11/18] Revert "cve-check: add lockfile to task" [dunfell,12/18] wireless-regdb: upgrade 2021.08.28 -> 2022.02.18 [dunfell,13/18] bootchart2: Add missing python3-math dependency [dunfell,14/18] cml1.bbclass: Handle ncurses-native being available via pkg-config [dunfell,15/18] libxml-parser-perl: Add missing RDEPENDS [dunfell,16/18] buildhistory.bbclass: create the buildhistory directory when needed [dunfell,17/18] uninative: Add version to uninative tarball name [dunfell,18/18] uninative: Upgrade to 3.5

Message ID

c50688e1d0839d71e05a0d15dd948113d2ef83f6.1646406001.git.steve@sakoman.com

State

Accepted, archived

Commit

c50688e1d0839d71e05a0d15dd948113d2ef83f6

Headers

From: Steve Sakoman <steve@sakoman.com>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][dunfell 09/18] coreutils: remove obsolete ignored CVE list
Date: Fri,  4 Mar 2022 05:04:17 -1000
Message-Id: 
 <c50688e1d0839d71e05a0d15dd948113d2ef83f6.1646406001.git.steve@sakoman.com>
In-Reply-To: <cover.1646406001.git.steve@sakoman.com>
References: <cover.1646406001.git.steve@sakoman.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[dunfell,01/18] libarchive: Fix for CVE-2021-36976 | expand

Commit Message

Steve Sakoman March 4, 2022, 3:04 p.m. UTC

From: Ross Burton <ross@burtonini.com>

Three CVEs were meant to be ignored via CVE_WHITELIST, but that wasn't
the correct variable name.

The CPEs for those CVEs mean that they don't get picked up in our report,
so just remove the assignment.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit dea00faf30ec7c19b6b5ed4651b430ba3faf69ff)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
 meta/recipes-core/coreutils/coreutils_8.31.bb | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/meta/recipes-core/coreutils/coreutils_8.31.bb b/meta/recipes-core/coreutils/coreutils_8.31.bb
index aabeee882c..3d569881e8 100644
--- a/meta/recipes-core/coreutils/coreutils_8.31.bb
+++ b/meta/recipes-core/coreutils/coreutils_8.31.bb
@@ -206,6 +206,3 @@  do_install_ptest () {
 }
 
 FILES_${PN}-ptest += "${bindir}/getlimits"
-
-# These are specific to Opensuse
-CVE_WHITELIST += "CVE-2013-0221 CVE-2013-0222 CVE-2013-0223"

[dunfell,09/18] coreutils: remove obsolete ignored CVE list

Commit Message

Patch