From 463e21fdcbadc0d99341225f9e5d774c2a447180 Mon Sep 17 00:00:00 2001 From: Thomas Petazzoni Date: Sun, 18 May 2025 10:56:58 +0200 Subject: [PATCH] package/exim: drop stale ignore CVE entry The CVE-2022-3620 entry is not reported as affecting our exim package by pkg-stats. Currently it's because the NVD entry is incorrect (incorrect exim version), but we sent a bug report [1] to the NVD database so that it gets updated. Once updated, pkg-stats still won't report the CVE as affecting us because the issue has been fixed in exim 4.97, and we're using a newer version. [1] https://lore.kernel.org/buildroot/20250517183000.40b28b4d@windsurf/ Signed-off-by: Thomas Petazzoni Signed-off-by: Julien Olivain --- package/exim/exim.mk | 3 --- 1 file changed, 3 deletions(-) diff --git a/package/exim/exim.mk b/package/exim/exim.mk index 9ecae0d038..bee3a79808 100644 --- a/package/exim/exim.mk +++ b/package/exim/exim.mk @@ -16,9 +16,6 @@ EXIM_DEPENDENCIES = host-berkeleydb host-pcre2 pcre2 berkeleydb host-pkgconf # 0006-Fix-regex-n-use-after-free.-Bug-2915.patch EXIM_IGNORE_CVES += CVE-2022-3559 -# built without dmarc support -EXIM_IGNORE_CVES += CVE-2022-3620 - # Modify a variable value. It must already exist in the file, either # commented or not. define exim-config-change # variable-name, variable-value