All of lore.kernel.org
 help / color / mirror / Atom feed
From: "Richard Purdie" <richard.purdie@linuxfoundation.org>
To: openembedded-core@lists.openembedded.org
Subject: [hardknott] [PATCH 15/28] jquery: Exclude CVE-2007-2379 from cve-check
Date: Thu, 20 May 2021 21:48:49 +0100	[thread overview]
Message-ID: <20210520204902.2527687-15-richard.purdie@linuxfoundation.org> (raw)
In-Reply-To: <20210520204902.2527687-1-richard.purdie@linuxfoundation.org>

The CVE is non-specific and depends on the users of jquery, doesn't
make sense to have this flagged against jquery as there is nothing we can
do about it.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
---
 meta/recipes-devtools/jquery/jquery_3.6.0.bb | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/meta/recipes-devtools/jquery/jquery_3.6.0.bb b/meta/recipes-devtools/jquery/jquery_3.6.0.bb
index 65905966c1c..03792730fd2 100644
--- a/meta/recipes-devtools/jquery/jquery_3.6.0.bb
+++ b/meta/recipes-devtools/jquery/jquery_3.6.0.bb
@@ -19,6 +19,11 @@ SRC_URI[map.sha256sum] = "399548fb0e7b146c12f5ba18099a47d594a970fee96212eee0ab48
 
 UPSTREAM_CHECK_REGEX = "jquery-(?P<pver>\d+(\.\d+)+)\.js"
 
+# https://github.com/jquery/jquery/issues/3927
+# There are ways jquery can expose security issues but any issues are in the apps exposing them
+# and there is little we can directly do
+CVE_CHECK_WHITELIST += "CVE-2007-2379"
+
 inherit allarch
 
 do_install() {
-- 
2.30.2


  parent reply	other threads:[~2021-05-20 20:49 UTC|newest]

Thread overview: 28+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2021-05-20 20:48 [hardknott] [PATCH 01/28] uninative: Upgrade to 3.2 (gcc11 support) Richard Purdie
2021-05-20 20:48 ` [hardknott] [PATCH 02/28] glibc: Add 8GB VM usage cap for usermode test suite Richard Purdie
2021-05-20 20:48 ` [hardknott] [PATCH 03/28] cups: whitelist CVE-2021-25317 Richard Purdie
2021-05-20 20:48 ` [hardknott] [PATCH 04/28] sstate: Handle manifest 'corruption' issue Richard Purdie
2021-05-20 20:48 ` [hardknott] [PATCH 05/28] ccache: add packageconfig docs option Richard Purdie
2021-05-20 20:48 ` [hardknott] [PATCH 06/28] libxml2: fix CVE-2021-3517 Richard Purdie
2021-05-20 20:48 ` [hardknott] [PATCH 07/28] libxml2: fix CVE-2021-3516 Richard Purdie
2021-05-20 20:48 ` [hardknott] [PATCH 08/28] libxml2: fix CVE-2021-3537 Richard Purdie
2021-05-20 20:48 ` [hardknott] [PATCH 09/28] glibc: Document and whitelist CVE-2019-1010022-25 Richard Purdie
2021-05-20 20:48 ` [hardknott] [PATCH 10/28] libnotify: whitelist CVE-2013-7381 (specific to the NodeJS bindings) Richard Purdie
2021-05-20 20:48 ` [hardknott] [PATCH 11/28] builder: whitelist CVE-2008-4178 (a different builder) Richard Purdie
2021-05-20 20:48 ` [hardknott] [PATCH 12/28] qemu: Exclude CVE-2017-5957 from cve-check Richard Purdie
2021-05-20 20:48 ` [hardknott] [PATCH 13/28] qemu: Exclude CVE-2007-0998 " Richard Purdie
2021-05-20 20:48 ` [hardknott] [PATCH 14/28] qemu: Exclude CVE-2018-18438 " Richard Purdie
2021-05-20 20:48 ` Richard Purdie [this message]
2021-05-20 20:48 ` [hardknott] [PATCH 16/28] logrotate: Exclude CVE-2011-1548,1549,1550 " Richard Purdie
2021-05-20 20:48 ` [hardknott] [PATCH 17/28] openssh: Exclude CVE-2007-2768 " Richard Purdie
2021-05-20 20:48 ` [hardknott] [PATCH 18/28] openssh: Exclude CVE-2008-3844 " Richard Purdie
2021-05-20 20:48 ` [hardknott] [PATCH 19/28] unzip: Exclude CVE-2008-0888 " Richard Purdie
2021-05-20 20:48 ` [hardknott] [PATCH 20/28] cpio: Exclude CVE-2010-4226 " Richard Purdie
2021-05-20 20:48 ` [hardknott] [PATCH 21/28] ghostscript: Exclude CVE-2013-6629 " Richard Purdie
2021-05-20 20:48 ` [hardknott] [PATCH 22/28] bluez: Exclude CVE-2020-12352 CVE-2020-24490 " Richard Purdie
2021-05-20 20:48 ` [hardknott] [PATCH 23/28] tiff: Exclude CVE-2015-7313 " Richard Purdie
2021-05-20 20:48 ` [hardknott] [PATCH 24/28] coreutils: Exclude CVE-2016-2781 " Richard Purdie
2021-05-20 20:48 ` [hardknott] [PATCH 25/28] librsvg: Exclude CVE-2018-1000041 " Richard Purdie
2021-05-20 20:49 ` [hardknott] [PATCH 26/28] avahi: Exclude CVE-2021-26720 " Richard Purdie
2021-05-20 20:49 ` [hardknott] [PATCH 27/28] image.bbclass: fix comment "pacackages" -> "packages" Richard Purdie
2021-05-20 20:49 ` [hardknott] [PATCH 28/28] meta/lib/oe/rootfs.py: Fix typo "Restoreing" -> "Restoring" Richard Purdie

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20210520204902.2527687-15-richard.purdie@linuxfoundation.org \
    --to=richard.purdie@linuxfoundation.org \
    --cc=openembedded-core@lists.openembedded.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.