From: "Armin Kuster" <akuster808@gmail.com>
To: openembedded-devel@lists.openembedded.org
Subject: [dunfell 11/11] dovecot: add CVE-2016-4983 to allowlist
Date: Tue, 6 Jul 2021 07:53:16 -0700 [thread overview]
Message-ID: <7bd47ef6c98323c95a9e527129dca98c9a65ee08.1625583100.git.akuster808@gmail.com> (raw)
In-Reply-To: <cover.1625583100.git.akuster808@gmail.com>
CVE-2016-4983 affects only postinstall script on specific distribution, so add it to allowlist.
Signed-off-by: Yuichi Ito <ito-yuichi@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 3613b50a84559ce771866cd1eef1141fa3e6d238)
[mkcert.sh does mask 077 first]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit d1fb027f894921ea02c984eb581ee1500c613470)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
meta-networking/recipes-support/dovecot/dovecot_2.2.36.4.bb | 3 +++
1 file changed, 3 insertions(+)
diff --git a/meta-networking/recipes-support/dovecot/dovecot_2.2.36.4.bb b/meta-networking/recipes-support/dovecot/dovecot_2.2.36.4.bb
index 0f7fad2b24..e21a94ad64 100644
--- a/meta-networking/recipes-support/dovecot/dovecot_2.2.36.4.bb
+++ b/meta-networking/recipes-support/dovecot/dovecot_2.2.36.4.bb
@@ -67,3 +67,6 @@ FILES_${PN} += "${libdir}/dovecot/*plugin.so \
FILES_${PN}-staticdev += "${libdir}/dovecot/*/*.a"
FILES_${PN}-dev += "${libdir}/dovecot/libdovecot*.so"
FILES_${PN}-dbg += "${libdir}/dovecot/*/.debug"
+
+# CVE-2016-4983 affects only postinstall script on specific distribution
+CVE_CHECK_WHITELIST += "CVE-2016-4983"
--
2.25.1
prev parent reply other threads:[~2021-07-06 14:53 UTC|newest]
Thread overview: 12+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-07-06 14:53 [dunfell 00/11] Patch review, July 5th Armin Kuster
2021-07-06 14:53 ` [dunfell 01/11] nss: Fix build on Centos 7 Armin Kuster
2021-07-06 14:53 ` [dunfell 02/11] python3-django: upgrade 2.2.7 -> 2.2.13 Armin Kuster
2021-07-06 14:53 ` [dunfell 03/11] python3-django: upgrade 2.2.13 -> 2.2.16 Armin Kuster
2021-07-06 14:53 ` [dunfell 04/11] python3-django: fix CVE-2021-28658 Armin Kuster
2021-07-06 14:53 ` [dunfell 05/11] python3-django: upgrade to 2.2.20 Armin Kuster
2021-07-06 14:53 ` [dunfell 06/11] python3-django: upgrade 2.2.20 -> 2.2.22 Armin Kuster
2021-07-06 14:53 ` [dunfell 07/11] python3-django: upgrade 2.2.22 -> 2.2.23 Armin Kuster
2021-07-06 14:53 ` [dunfell 08/11] python3-django: upgrade 2.2.23 -> 2.2.24 Armin Kuster
2021-07-06 14:53 ` [dunfell 09/11] add CVE-2011-2411 to allowlist Armin Kuster
2021-07-06 14:53 ` [dunfell 10/11] cyrus-sasl: add CVE-2020-8032 " Armin Kuster
2021-07-06 14:53 ` Armin Kuster [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=7bd47ef6c98323c95a9e527129dca98c9a65ee08.1625583100.git.akuster808@gmail.com \
--to=akuster808@gmail.com \
--cc=openembedded-devel@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.