Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

libsndfile: Add CVE-2018-13419 to CVE_CHECK_WHITELIST #411

Merged
merged 1 commit into from
Mar 15, 2023

Conversation

masami256
Copy link
Contributor

Purpose of pull request

Upstream closed this bug (libsndfile/libsndfile#398) because it is not reproducible and not test script was provided.
So, it is okay to ignore this CVE.

Test

How to test

Run cve-check task

# bitbake libsndfile1 -c cve_check

Test result

Without this patch CVE-2018-13419 should be shown.

NOTE: Executing RunQueue Tasks
WARNING: libsndfile1-1.0.28-r0 do_cve_check: Found unpatched CVE (CVE-2018-13419), for more information check /home/build/work/emlinux/latest-dev/build/tmp-glibc/work/aarch64-emlinux-linux/libsndfile1/1.0.28-r0/temp/cve.log
NOTE: Tasks Summary: Attempted 2 tasks of which 0 didn't need to be rerun and all succeeded.

With this patch CVE-2018-13419 shouldn't be shown.

Initialising tasks: 100% |#############################################################################################################################################################| Time: 0:00:00
NOTE: Executing RunQueue Tasks
NOTE: Tasks Summary: Attempted 2 tasks of which 0 didn't need to be rerun and all succeeded.

Upstream closed this bug because it is not reproducible and not test
script was provided.

Signed-off-by: Masami Ichikawa <masami.ichikawa@miraclelinux.com>
@hiraku-wfs hiraku-wfs self-assigned this Mar 15, 2023
@hiraku-wfs hiraku-wfs merged commit c3eaaee into miraclelinux:warrior Mar 15, 2023
@hiraku-wfs
Copy link
Member

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants