[honister,08/17] gcc: Add CVE-2021-37322 to the list of CVEs to ignore

Message ID c85a595b23df19c0e51977dae65266888e2706c4.1639444641.git.anuj.mittal@intel.com
State Accepted, archived
Commit c85a595b23df19c0e51977dae65266888e2706c4
Headers show
Series [honister,01/17] ncurses: fix CVE-2021-39537 | expand

Commit Message

Mittal, Anuj Dec. 14, 2021, 1:20 a.m. UTC
From: Richard Purdie <richard.purdie@linuxfoundation.org>

The CVE applies to binutils 2.26 and not to gcc so ignore there.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit fea2726663a3db03170c49fceaffc632c509aeea)
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
---
 meta/recipes-devtools/gcc/gcc-11.2.inc | 3 +++
 1 file changed, 3 insertions(+)

Patch

diff --git a/meta/recipes-devtools/gcc/gcc-11.2.inc b/meta/recipes-devtools/gcc/gcc-11.2.inc
index 9fd30f52a8..cd1b022ff2 100644
--- a/meta/recipes-devtools/gcc/gcc-11.2.inc
+++ b/meta/recipes-devtools/gcc/gcc-11.2.inc
@@ -117,3 +117,6 @@  EXTRA_OECONF_PATHS = "\
     --with-sysroot=/not/exist \
     --with-build-sysroot=${STAGING_DIR_TARGET} \
 "
+
+# Is a binutils 2.26 issue, not gcc
+CVE_CHECK_WHITELIST += "CVE-2021-37322"