From 503adba18a0cae211e2f71e8ef0c08df6b612b07 Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Tue, 30 Dec 2025 09:19:15 +0100 Subject: [PATCH] package/freerdp: remove stale IGNORE_CVES The NVD DB is now correctly tracking the vulnerability starting version 3.0 (see [1]). The IGNORE_CVES entry introduced in [2] is then no longer needed. [1] https://nvd.nist.gov/vuln/detail/CVE-2025-4478 [2] f741e8f6e6 package/freerdp: ignore CVE-2025-4478 Signed-off-by: Thomas Perale Signed-off-by: Thomas Petazzoni (cherry picked from commit b3007ebcaf4736dde948a43ea6f8abee6b83c8c5) Signed-off-by: Thomas Perale --- package/freerdp/freerdp.mk | 4 ---- 1 file changed, 4 deletions(-) diff --git a/package/freerdp/freerdp.mk b/package/freerdp/freerdp.mk index 391b9a4675..3a1ba61621 100644 --- a/package/freerdp/freerdp.mk +++ b/package/freerdp/freerdp.mk @@ -13,10 +13,6 @@ FREERDP_LICENSE = Apache-2.0 FREERDP_LICENSE_FILES = LICENSE FREERDP_CPE_ID_VENDOR = freerdp -# As explained on https://github.com/FreeRDP/FreeRDP/pull/11573#issuecomment-2904160524, -# the affected code is new with 3.x, was not there on 2.x -FREERDP_IGNORE_CVES += CVE-2025-4478 - FREERDP_INSTALL_STAGING = YES FREERDP_CONF_OPTS = -DWITH_MANPAGES=OFF -Wno-dev -DWITH_GSTREAMER_0_10=OFF