From e2188ac73b15a49f0c84d41d9180a60d2cbb9a7d Mon Sep 17 00:00:00 2001 From: Mathieu Dubois-Briand Date: Tue, 4 Oct 2022 08:24:37 +0200 Subject: mbedtls: Whitelist CVE-2021-43666, CVE-2021-45451 Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Khem Raj --- meta-networking/recipes-connectivity/mbedtls/mbedtls_2.28.1.bb | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'meta-networking') diff --git a/meta-networking/recipes-connectivity/mbedtls/mbedtls_2.28.1.bb b/meta-networking/recipes-connectivity/mbedtls/mbedtls_2.28.1.bb index 44b2a5e3c8..742414dd8a 100644 --- a/meta-networking/recipes-connectivity/mbedtls/mbedtls_2.28.1.bb +++ b/meta-networking/recipes-connectivity/mbedtls/mbedtls_2.28.1.bb @@ -44,3 +44,8 @@ FILES:${PN}-programs = "${bindir}/" BBCLASSEXTEND = "native nativesdk" CVE_PRODUCT = "mbed_tls" + +# Fix merged upstream https://github.com/Mbed-TLS/mbedtls/pull/5310 +CVE_CHECK_IGNORE += "CVE-2021-43666" +# Fix merged upstream https://github.com/Mbed-TLS/mbedtls/commit/9a4a9c66a48edfe9ece03c7e4a53310adf73a86c +CVE_CHECK_IGNORE += "CVE-2021-45451" -- cgit v1.2.3-54-g00ecf