From 144a817f4ff9c768de7a9daf2ea7ae406119d1f9 Mon Sep 17 00:00:00 2001
From: Peter Korsgaard <peter@korsgaard.com>
Date: Sat, 20 Jul 2024 10:26:13 +0200
Subject: [PATCH] package/openssh: add CVE ignore for CVE-2024-6387

Commit e7f124e9b632 (package/openssh: disable async-signal-unsafe code in
sshsigdie()) add a patch for CVE-2024-6387 but forgot to add an _IGNORE_CVES
entry.  Fix that.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
---
 package/openssh/openssh.mk | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/package/openssh/openssh.mk b/package/openssh/openssh.mk
index 5a568d5fd1..9a1dee2a3d 100644
--- a/package/openssh/openssh.mk
+++ b/package/openssh/openssh.mk
@@ -16,6 +16,9 @@ OPENSSH_LICENSE_FILES = LICENCE
 # 0001-Improve-detection-of-fzero-call-used-regs-used.patch
 OPENSSH_AUTORECONF = YES
 
+# 0002-sshsigdie-async-signal-unsafe.patch
+OPENSSH_IGNORE_CVES += CVE-2024-6387
+
 OPENSSH_CONF_ENV = \
 	LD="$(TARGET_CC)" \
 	LDFLAGS="$(TARGET_CFLAGS)" \