diff options
| author |   Sana Kazi <sanakazisk19@gmail.com> | 2024-04-04 07:53:44 +0200 |
|---|---|---|
| committer |   Steve Sakoman <steve@sakoman.com> | 2024-04-05 07:38:10 -0700 |
| commit | de4186610335201c69d8952d605bb291f4a7427c (patch) | |
| tree | 9b09d3a2dceb56032db009f8b72c5709c1f8425e | |
| parent | 8df158f39f1eed1e3ae88ddf935c67e067b72525 (diff) | |
| download | openembedded-core-contrib-de4186610335201c69d8952d605bb291f4a7427c.tar.gz | |
openssh: Add CVE-2023-51767 to CVE_CHECK_IGNORE
Add CVE-2023-51767 to CVE_CHECK_IGNORE to avoid in cve-check reports
as upstream does not consider CVE-2023-51767 a bug underlying in
OpenSSH and does not intent to address it in OpenSSH.
Signed-off-by: Sana Kazi <sana.kazi@kpit.com>
Signed-off-by: Sana Kazi <sana.kazisk19@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
| -rw-r--r-- | meta/recipes-connectivity/openssh/openssh_8.9p1.bb | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/meta/recipes-connectivity/openssh/openssh_8.9p1.bb b/meta/recipes-connectivity/openssh/openssh_8.9p1.bb index bc8e2d81b8..6411a64eff 100644 --- a/meta/recipes-connectivity/openssh/openssh_8.9p1.bb +++ b/meta/recipes-connectivity/openssh/openssh_8.9p1.bb @@ -49,6 +49,11 @@ CVE_CHECK_IGNORE += "CVE-2014-9278" # CVE only applies to some distributed RHEL binaries CVE_CHECK_IGNORE += "CVE-2008-3844" +# Upstream does not consider CVE-2023-51767 a bug underlying in OpenSSH and +# does not intent to address it in OpenSSH +# https://security-tracker.debian.org/tracker/CVE-2023-51767 +CVE_CHECK_IGNORE += "CVE-2023-51767" + PAM_SRC_URI = "file://sshd" inherit manpages useradd update-rc.d update-alternatives systemd |