From 2b8072fcbdc79f21811956ceaa00a3c3e06846bb Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Tue, 30 Dec 2025 09:19:09 +0100 Subject: [PATCH] package/pixman: remove stale IGNORE_CVES Since Buildroot commit [1] the CVEs are no longer matched to CPEs with versions using '-'. The CVE-2023-37769 is then no longer matched to the pixman package. For more information, see the explanation in commit [1]. [1] 35f376d88e support/scripts/cve.py: fix CPE matching Signed-off-by: Thomas Perale Signed-off-by: Thomas Petazzoni (cherry picked from commit 5043af53edea237dab1d5334b263cc9245d44404) Signed-off-by: Thomas Perale --- package/pixman/pixman.mk | 6 ------ 1 file changed, 6 deletions(-) diff --git a/package/pixman/pixman.mk b/package/pixman/pixman.mk index 0a6ecaa7dd..08ca9003bb 100644 --- a/package/pixman/pixman.mk +++ b/package/pixman/pixman.mk @@ -26,12 +26,6 @@ PIXMAN_CONF_OPTS = \ -Dlibpng=disabled \ -Dtests=disabled -# Affects only tests, and we don't build tests. -# See https://gitlab.freedesktop.org/pixman/pixman/-/issues/76, which says -# "not sure why NVD keeps assigning CVEs like this. This is just a test -# executable". -PIXMAN_IGNORE_CVES += CVE-2023-37769 - ifeq ($(BR2_X86_CPU_HAS_MMX),y) PIXMAN_CONF_OPTS += -Dmmx=enabled else