From: Richard Purdie <richard.pur...@linuxfoundation.org> Upstream don't believe it is a signifiant real world issue and will only fix in 1.17 onwards. Therefore exclude it from our reports.
https://github.com/golang/go/issues/30999#issuecomment-910470358 Signed-off-by: Richard Purdie <richard.pur...@linuxfoundation.org> (cherry picked from commit 5bd5faf0c34b47b2443975d66b71482d2380a01a) Signed-off-by: Anuj Mittal <anuj.mit...@intel.com> --- meta/recipes-devtools/go/go-1.16.7.inc | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/meta/recipes-devtools/go/go-1.16.7.inc b/meta/recipes-devtools/go/go-1.16.7.inc index ed2d94671b..9eca1caeeb 100644 --- a/meta/recipes-devtools/go/go-1.16.7.inc +++ b/meta/recipes-devtools/go/go-1.16.7.inc @@ -19,3 +19,8 @@ SRC_URI += "\ file://0001-encoding-xml-handle-leading-trailing-or-double-colon.patch \ " SRC_URI[main.sha256sum] = "1a9f2894d3d878729f7045072f30becebe243524cf2fce4e0a7b248b1e0654ac" + +# Upstream don't believe it is a signifiant real world issue and will only +# fix in 1.17 onwards where we can drop this. +# https://github.com/golang/go/issues/30999#issuecomment-910470358 +CVE_CHECK_WHITELIST += "CVE-2021-29923" -- 2.31.1
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#156088): https://lists.openembedded.org/g/openembedded-core/message/156088 Mute This Topic: https://lists.openembedded.org/mt/85640883/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
