mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-09 17:03:35 -09:00
package/cmake: remove stale IGNORE_CVES
Since Buildroot commit [1] the CVEs are no longer matched to CPEs with versions using '-'. These IGNORE_CVES entry introduced in [2] is then no longer matched to the cmake package. For more information, see the explanation in commit [1]. [1]35f376d88esupport/scripts/cve.py: fix CPE matching [2]5ce1e773b9package/cmake: ignore CVE-2016-10642 Signed-off-by: Thomas Perale <thomas.perale@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commitac47f65186) Signed-off-by: Thomas Perale <thomas.perale@mind.be>
This commit is contained in:
@@ -11,8 +11,6 @@ CMAKE_SITE = https://cmake.org/files/v$(CMAKE_VERSION_MAJOR)
|
||||
CMAKE_LICENSE = BSD-3-Clause
|
||||
CMAKE_LICENSE_FILES = Copyright.txt
|
||||
CMAKE_CPE_ID_VALID = YES
|
||||
# Tool download MITM attack warning if using npm package to install cmake
|
||||
CMAKE_IGNORE_CVES = CVE-2016-10642
|
||||
|
||||
# The package is a dependency to ccache so ccache cannot be a dependency
|
||||
HOST_CMAKE_ADD_CCACHE_DEPENDENCY = NO
|
||||
|
||||
Reference in New Issue
Block a user