From 64dcd86ccf818b11e39866dd81efaf561e575251 Mon Sep 17 00:00:00 2001 From: Fabrice Fontaine Date: Wed, 13 Oct 2021 23:01:17 +0200 Subject: [PATCH] Revert "package/coreutils: ignore CVE-2013-0221, CVE-2013-0222, CVE-2013-0223" This reverts commit 8ae9156d8b730689484927fba2ec2fa6c1dc0433 as those CVEs are not tagged as affecting gnu:coreutils in NVD NIST database but opensuse:opensuse and redhat:entreprise_linux: - https://nvd.nist.gov/vuln/detail/CVE-2013-0221 - https://nvd.nist.gov/vuln/detail/CVE-2013-0222 - https://nvd.nist.gov/vuln/detail/CVE-2013-0223 Signed-off-by: Fabrice Fontaine Signed-off-by: Yann E. MORIN (cherry picked from commit 7d569f51914c22457e35bba6f7658c4b3d8af086) Signed-off-by: Peter Korsgaard --- package/coreutils/coreutils.mk | 4 ---- 1 file changed, 4 deletions(-) diff --git a/package/coreutils/coreutils.mk b/package/coreutils/coreutils.mk index 3ec3c847c2..57b77b8c6a 100644 --- a/package/coreutils/coreutils.mk +++ b/package/coreutils/coreutils.mk @@ -10,10 +10,6 @@ COREUTILS_SOURCE = coreutils-$(COREUTILS_VERSION).tar.xz COREUTILS_LICENSE = GPL-3.0+ COREUTILS_LICENSE_FILES = COPYING COREUTILS_CPE_ID_VENDOR = gnu -# Only when including SUSE coreutils-i18n.patch -COREUTILS_IGNORE_CVES = CVE-2013-0221 -COREUTILS_IGNORE_CVES += CVE-2013-0222 -COREUTILS_IGNORE_CVES += CVE-2013-0223 # We're patching m4/pthread-cond.m4 COREUTILS_AUTORECONF = YES