mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-09-24 23:21:17 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #151 from kinvolk/dongsu/glsa-update-20210903

Browse Source 
build_library: update allow list for GLSA checks 2021-09-03
This commit is contained in:
Dongsu Park 2021-09-06 16:04:04 +02:00 committed by GitHub
commit 5f9fb5cd08
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
build_library/test_image_content.sh
View File

@ -5,21 +5,17 @@
GLSA_WHITELIST=( GLSA_WHITELIST=(
201412-09 # incompatible CA certificate version numbers 201412-09 # incompatible CA certificate version numbers
201908-14 # backported both CVE fixes 201908-14 # backported both CVE fixes
201904-13 # git
201909-01 # Perl, SDK only 201909-01 # Perl, SDK only
201909-08 # backported fix
201911-01 # package too old to even have the affected USE flag
202003-20 # backported fix
202003-12 # only applies to old, already-fixed CVEs
202003-24 # SDK only
202003-26 # SDK only 202003-26 # SDK only
202003-30 # fixed by updating within older minor release
202003-31 # SDK only
202003-52 # difficult to update :-(
202004-10 # fixed by updating within older minor release
202004-13 # fixed by updating within older minor release
202005-02 # SDK only
202005-09 # SDK only 202005-09 # SDK only
202006-03 # perl, SDK only
202008-01 # python, SDK only
202101-18 # python, SDK only
202104-04 # python, SDK only
202105-22 # samba, not affected, samba has no ldap flag, no smbd.
202105-34 # bash, non-trivial
202107-31 # polkit, in-progress
202107-48 # systemd, backported fixes to v247.
) )
glsa_image() { glsa_image() {