mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-10-01 06:21:56 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/glibc: add CVE ignore for CVE-2023-4806

Browse Source 
Commit 8519de517e (package/{glibc, localedef}: security bump to version
glibc-2.38-27-g750a45a783906a19591fb8ff6b7841470f1f5701) correctly mentioned
CVE-2023-4806 in the commit message, but forgot to add an ignore for it.

Fix that.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
Peter Korsgaard
2024-01-31 09:12:53 +01:00
parent d932f84d9f
commit 62b767fd3e
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
package/glibc/glibc.mk
View File

@@ -28,6 +28,10 @@ GLIBC_CPE_ID_VERSION = $(word 1, $(subst -,$(space),$(GLIBC_VERSION)))
# 2.38 and the version we're really using # 2.38 and the version we're really using
GLIBC_IGNORE_CVES += CVE-2023-4527 GLIBC_IGNORE_CVES += CVE-2023-4527
# Fixed by 5ee59ca371b99984232d7584fe2b1a758b4421d3, which is between
# 2.38 and the version we're really using
GLIBC_IGNORE_CVES += CVE-2023-4806
# Fixed by 750a45a783906a19591fb8ff6b7841470f1f5710, which is between # Fixed by 750a45a783906a19591fb8ff6b7841470f1f5710, which is between
# 2.38 and the version we're really using. # 2.38 and the version we're really using.
GLIBC_IGNORE_CVES += CVE-2023-4911 GLIBC_IGNORE_CVES += CVE-2023-4911