[OE-core] [zeus][PATCH 07/11] glib: Whitelist CVE-2019-12450

Anuj Mittal anuj.mittal at intel.com
Sat Dec 14 06:15:01 UTC 2019


From: Adrian Bunk <bunk at stusta.de>

Fixed in 2.60.4, but CPE data is outdated.

Signed-off-by: Adrian Bunk <bunk at stusta.de>
Signed-off-by: Anuj Mittal <anuj.mittal at intel.com>
---
 meta/recipes-core/glib-2.0/glib-2.0_2.60.7.bb | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/meta/recipes-core/glib-2.0/glib-2.0_2.60.7.bb b/meta/recipes-core/glib-2.0/glib-2.0_2.60.7.bb
index 740473719d..5aefa6ad8b 100644
--- a/meta/recipes-core/glib-2.0/glib-2.0_2.60.7.bb
+++ b/meta/recipes-core/glib-2.0/glib-2.0_2.60.7.bb
@@ -23,3 +23,6 @@ SRC_URI_append_class-target = " file://glib-meson.cross"
 
 SRC_URI[md5sum] = "f036f78a7fca330d9f7d939fcf794bde"
 SRC_URI[sha256sum] = "8b12c0af569afd3b71200556ad751bad4cf4bf7bc4b5f880638459a42ca86310"
+
+# Fixed in 2.60.4, but CPE data is outdated
+CVE_CHECK_WHITELIST += "CVE-2019-12450"
-- 
2.21.0



More information about the Openembedded-core mailing list