[OE-core] [PATCH] bind: Whitelist CVE-2019-6470

Adrian Bunk bunk at stusta.de
Mon Nov 18 14:04:56 UTC 2019


On Thu, Nov 14, 2019 at 01:16:44PM +0000, Ross Burton wrote:
> On 14/11/2019 12:51, Adrian Bunk wrote:
> > On Thu, Nov 14, 2019 at 12:04:40PM +0000, Ross Burton wrote:
> > > On 13/11/2019 08:19, Adrian Bunk wrote:
> > > > +# Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later
> > > > +CVE_CHECK_WHITELIST += "CVE-2019-6470"
> > > 
> > > Can you be a bit more explicit about why this is whitelisted?
> > 
> > Something like
> >    BIND >= 9.11.2 need dhcpd >= 4.4.1, don't report it here since
> >    dhcpd is already recent enough.
> 
> Right.

v2 sent.

> Ross

cu
Adrian


More information about the Openembedded-core mailing list