All of lore.kernel.org
 help / color / mirror / Atom feed
From: pawan <badganchipv@gmail.com>
To: openembedded-devel@lists.openembedded.org, badganchipv@gmail.com
Cc: ranjitsinh.rathod@kpit.com
Subject: [meta-java][dunfell][PATCH] jsch: Whitelist CVE-2016-5725
Date: Thu, 15 Sep 2022 15:40:25 +0530	[thread overview]
Message-ID: <20220915101025.16956-1-badganchipv@gmail.com> (raw)

From: Pawan Badganchi <badganchipv@gmail.com>

Whitelist the CVE because it only affects windows platforms
Link: https://ubuntu.com/security/CVE-2016-5725

Signed-off-by: Pawan Badganchi <badganchipv@gmail.com>
---
 .../0001-jsch-Whitelist-CVE-2016-5725.patch   | 29 +++++++++++++++++++
 recipes-core/jcraft/jsch_0.1.40.bb            |  3 ++
 2 files changed, 32 insertions(+)
 create mode 100644 recipes-core/jcraft/0001-jsch-Whitelist-CVE-2016-5725.patch

diff --git a/recipes-core/jcraft/0001-jsch-Whitelist-CVE-2016-5725.patch b/recipes-core/jcraft/0001-jsch-Whitelist-CVE-2016-5725.patch
new file mode 100644
index 0000000..880440c
--- /dev/null
+++ b/recipes-core/jcraft/0001-jsch-Whitelist-CVE-2016-5725.patch
@@ -0,0 +1,29 @@
+From 1ea9958fae5a89b04ed790f45cb4f18075a35d65 Mon Sep 17 00:00:00 2001
+From: Pawan Badganchi <pawan.badganchi@kpit.com>
+Date: Wed, 13 Apr 2022 16:04:32 +0530
+Subject: [PATCH] jsch: Whitelist CVE-2016-5725
+
+Whitelist the CVE because it only affects windows platforms
+Link: https://ubuntu.com/security/CVE-2016-5725
+
+Signed-off-by: Pawan Badganchi<pawan.badganchi@kpit.com>
+---
+ recipes-core/jcraft/jsch_0.1.40.bb | 3 +++
+ 1 file changed, 3 insertions(+)
+
+diff --git a/recipes-core/jcraft/jsch_0.1.40.bb b/recipes-core/jcraft/jsch_0.1.40.bb
+index a0f70d8..1170095 100644
+--- a/recipes-core/jcraft/jsch_0.1.40.bb
++++ b/recipes-core/jcraft/jsch_0.1.40.bb
+@@ -25,5 +25,8 @@ do_compile() {
+ SRC_URI[md5sum] = "b59cec19a487e95aed68378976b4b566"
+ SRC_URI[sha256sum] = "ca9d2ae08fd7a8983fb00d04f0f0c216a985218a5eb364ff9bee73870f28e097"
+ 
++# Whitelist the CVE because it only affects Windows platforms
++CVE_CHECK_WHITELIST += "CVE-2016-5725"
++
+ BBCLASSEXTEND = "native"
+ 
+-- 
+2.17.1
+
diff --git a/recipes-core/jcraft/jsch_0.1.40.bb b/recipes-core/jcraft/jsch_0.1.40.bb
index a0f70d8..1170095 100644
--- a/recipes-core/jcraft/jsch_0.1.40.bb
+++ b/recipes-core/jcraft/jsch_0.1.40.bb
@@ -25,5 +25,8 @@ do_compile() {
 SRC_URI[md5sum] = "b59cec19a487e95aed68378976b4b566"
 SRC_URI[sha256sum] = "ca9d2ae08fd7a8983fb00d04f0f0c216a985218a5eb364ff9bee73870f28e097"
 
+# Whitelist the CVE because it only affects Windows platforms
+CVE_CHECK_WHITELIST += "CVE-2016-5725"
+
 BBCLASSEXTEND = "native"
 
-- 
2.37.3



             reply	other threads:[~2022-09-15 10:10 UTC|newest]

Thread overview: 6+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2022-09-15 10:10 pawan [this message]
2022-09-20 13:56 ` [meta-java][dunfell][PATCH] jsch: Whitelist CVE-2016-5725 Pawan Badganchi
  -- strict thread matches above, loose matches on Subject: below --
2022-08-29 12:41 [oe] [meta-java[dunfell][PATCH] " Richard Leitner
2022-09-15  9:47 ` Pawan
2022-04-21 13:45 Pawan
2022-05-30 11:40 ` Ranjitsinh Rathod
2022-08-29  8:56 ` Pawan

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20220915101025.16956-1-badganchipv@gmail.com \
    --to=badganchipv@gmail.com \
    --cc=openembedded-devel@lists.openembedded.org \
    --cc=ranjitsinh.rathod@kpit.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.