From 390fcea57322312bfc23deded7fec6132075fef4 Mon Sep 17 00:00:00 2001 From: Saloni Jain Date: Wed, 11 Aug 2021 07:32:27 -0400 Subject: xerces-j: Whitelisted CVE-2018-2799 Whitelisted below CVE: CVE-2018-2799: CVE only applies to some Oracle Java SE and Red Hat Enterprise Linux versions which is already fixed with updates and the issue is closed. Link: https://access.redhat.com/security/cve/CVE-2018-2799 Link: https://bugzilla.redhat.com/show_bug.cgi?id=1567542 Signed-off-by: Saloni Jain Signed-off-by: Richard Leitner --- recipes-core/xerces-j/xerces-j_2.11.0.bb | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/recipes-core/xerces-j/xerces-j_2.11.0.bb b/recipes-core/xerces-j/xerces-j_2.11.0.bb index 105a196..fda6fe4 100644 --- a/recipes-core/xerces-j/xerces-j_2.11.0.bb +++ b/recipes-core/xerces-j/xerces-j_2.11.0.bb @@ -14,6 +14,12 @@ LIC_FILES_CHKSUM = " \ SRC_URI = "http://archive.apache.org/dist/xerces/j/Xerces-J-src.${PV}.tar.gz" +# CVE only applies to some Oracle Java SE and Red Hat Enterprise Linux versions. +# Already fixed with updates and closed. +# https://access.redhat.com/security/cve/CVE-2018-2799 +# https://bugzilla.redhat.com/show_bug.cgi?id=1567542 +CVE_CHECK_WHITELIST += "CVE-2018-2799" + S = "${WORKDIR}/xerces-2_11_0" inherit java-library -- cgit v1.2.3-54-g00ecf