From df718abc5798f3f46da2aa526f7348f2ea261394 Mon Sep 17 00:00:00 2001 From: Benjamin Gilbert Date: Thu, 16 Apr 2020 02:09:05 -0400 Subject: [PATCH] test_image_content: whitelist some GLSAs systemd and sudo are already fixed. Git was fixed by updating to 2.23.2, not 2.24.1. Samba is 2 years old and customized, thus difficult to update. file, Python, and gdb are only in the SDK. --- build_library/test_image_content.sh | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/build_library/test_image_content.sh b/build_library/test_image_content.sh index 476eb3445d..1d1f6ae210 100644 --- a/build_library/test_image_content.sh +++ b/build_library/test_image_content.sh @@ -8,6 +8,14 @@ GLSA_WHITELIST=( 201904-13 # git 201909-01 # Perl, SDK only 201909-08 # backported fix + 201911-01 # package too old to even have the affected USE flag + 202003-20 # backported fix + 202003-12 # only applies to old, already-fixed CVEs + 202003-24 # SDK only + 202003-26 # SDK only + 202003-30 # fixed by updating within older minor release + 202003-31 # SDK only + 202003-52 # difficult to update :-( ) glsa_image() {