From 0114a8b497973d8ece139eb7cd04be9c103b4c77 Mon Sep 17 00:00:00 2001
From: Titouan Christophe <titouan.christophe@mind.be>
Date: Sat, 4 Apr 2026 12:28:46 +0200
Subject: [PATCH] package/rauc: ignore CVE-2026-34155

Buildroot commit c9f7b876ee5bac0ee7344e5ecb7bd3ac0d5aab76 added a patch to
fix the vulnerability for rauc v1.13, but forgot to ignore the CVE in rauc.mk

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
---
 package/rauc/rauc.mk | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/package/rauc/rauc.mk b/package/rauc/rauc.mk
index 92f58c6139..f8fbb5fdd0 100644
--- a/package/rauc/rauc.mk
+++ b/package/rauc/rauc.mk
@@ -13,6 +13,9 @@ RAUC_CPE_ID_VENDOR = pengutronix
 RAUC_DEPENDENCIES = host-pkgconf openssl libglib2
 RAUC_CONF_OPTS += -Dtests=false
 
+# 0001-fix-cve-2026-34155.patch
+RAUC_IGNORE_CVES += CVE-2026-34155
+
 ifeq ($(BR2_PACKAGE_RAUC_DBUS),y)
 RAUC_CONF_OPTS += -Dservice=true
 RAUC_DEPENDENCIES += dbus