From b9fe34b1ad280d1ae7f8bc684715d2d1529c60fa Mon Sep 17 00:00:00 2001 From: Armin Kuster Date: Sun, 22 Aug 2021 08:44:44 -0700 Subject: tcpdump: Exclude CVE-2020-8036 from check This issue was introduce in 4.9 by 246ca110 Autosar SOME/IP protocol support which is after 4.9.3 Signed-off-by: Armin Kuster --- meta-networking/recipes-support/tcpdump/tcpdump_4.9.3.bb | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/meta-networking/recipes-support/tcpdump/tcpdump_4.9.3.bb b/meta-networking/recipes-support/tcpdump/tcpdump_4.9.3.bb index 8f7bd59f18..2ea493863a 100644 --- a/meta-networking/recipes-support/tcpdump/tcpdump_4.9.3.bb +++ b/meta-networking/recipes-support/tcpdump/tcpdump_4.9.3.bb @@ -50,3 +50,8 @@ do_install_append() { do_compile_ptest() { oe_runmake buildtest-TESTS } + +#https://nvd.nist.gov/vuln/detail/CVE-2020-8036 +#Introduce in 4.9 by 246ca110 Autosar SOME/IP protocol support +#which does not exist in 4.9.3 +CVE_CHECK_WHITELIST += "CVE-2020-8036" -- cgit 1.2.3-korg