[meta-oe] libzip: add CVE-2017-12858 to allowlist

Message ID 20220405050310.1515346-1-shin.matsunaga@fujitsu.com
State New
Headers show
Series [meta-oe] libzip: add CVE-2017-12858 to allowlist | expand

Commit Message

Shinji Matsunaga April 5, 2022, 5:03 a.m. UTC
Patch for CVE-2017-12858 is applied in version 1.2.0.

Signed-off-by: matsunaga-shinji <shin.matsunaga@fujitsu.com>
---
 meta-oe/recipes-extended/libzip/libzip_1.8.0.bb | 3 +++
 1 file changed, 3 insertions(+)

Patch

diff --git a/meta-oe/recipes-extended/libzip/libzip_1.8.0.bb b/meta-oe/recipes-extended/libzip/libzip_1.8.0.bb
index 23ac76a2d..71072a592 100644
--- a/meta-oe/recipes-extended/libzip/libzip_1.8.0.bb
+++ b/meta-oe/recipes-extended/libzip/libzip_1.8.0.bb
@@ -22,3 +22,6 @@  inherit cmake
 SRC_URI = "https://libzip.org/download/libzip-${PV}.tar.xz"
 
 SRC_URI[sha256sum] = "f0763bda24ba947e80430be787c4b068d8b6aa6027a26a19923f0acfa3dac97e"
+
+# Patch for CVE-2017-12858 is applied in version 1.2.0.
+CVE_CHECK_IGNORE += "CVE-2017-12858"