From 237cd294b7bbe7c42e621042bef4756724d2c233 Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Tue, 30 Dec 2025 09:19:06 +0100 Subject: [PATCH] package/tiff: remove stale IGNORE_CVES The Buildroot commit [1] introduced this IGNORE_CVES entry that was due to a bad NVD entry. The NVD database has now fixed the annotation [2] and it can be removed. [1] 740412aefc package/tiff: ignore CVE-2025-8851 [2] https://nvd.nist.gov/vuln/detail/CVE-2025-8851 Signed-off-by: Thomas Perale Signed-off-by: Thomas Petazzoni --- package/tiff/tiff.mk | 3 --- 1 file changed, 3 deletions(-) diff --git a/package/tiff/tiff.mk b/package/tiff/tiff.mk index 32bebcf95f..e64a6baf83 100644 --- a/package/tiff/tiff.mk +++ b/package/tiff/tiff.mk @@ -13,9 +13,6 @@ TIFF_CPE_ID_VENDOR = libtiff TIFF_CPE_ID_PRODUCT = libtiff TIFF_INSTALL_STAGING = YES -# Fixed in 4.7.0 -TIFF_IGNORE_CVES += CVE-2025-8851 - # webp has a (optional) dependency on tiff, so we can't have webp # support in tiff, or that would create a circular dependency. TIFF_CONF_OPTS = \