mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2025-12-14 22:35:25 +01:00
links: set CVE_PRODUCT
There are some unrelated software called "links", which cases false-positive CVEs to be reported by the CVE checker. Set the vendor/product pairs that were historically used with CVEs for this software. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
parent
cc1ec784bf
commit
62a5309732
|
|
@ -14,4 +14,6 @@ PACKAGECONFIG ??= ""
|
|||
PACKAGECONFIG[bzip2] = "--with-bzip2,--without-bzip2,bzip2"
|
||||
PACKAGECONFIG[lzma] = "--with-lzma,--without-lzma,xz"
|
||||
|
||||
CVE_PRODUCT = "twibright_labs:links twibright:links links:links"
|
||||
|
||||
inherit autotools pkgconfig
|
||||
|
|
|
|||
|
|
@ -9,5 +9,3 @@ EXTRA_OECONF = "--enable-graphics \
|
|||
--without-directfb --without-pmshell --without-atheos \
|
||||
--without-x"
|
||||
SRC_URI[sha256sum] = "22aa96c0b38e1a6f8f7ed9d7a4167a47fc37246097759ef6059ecf8f9ead7998"
|
||||
|
||||
CVE_STATUS[CVE-2008-3319] = "cpe-incorrect: The recipe used in the `meta-openembedded` is a different links package compared to the one which has the CVE issue."
|
||||
|
|
|
|||
Loading…
Reference in New Issue
Block a user