mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-10 08:14:09 -09:00
package/graphicsmagick: add CVE-2008-6621 to IGNORE_CVES
This vulnerability match on every version of graphicsmagick. Since it's
really old it's unlikely it will be updated and is thus added to
IGNORE_CVES. See [1].
[1] https://nvd.nist.gov//vuln/detail/CVE-2008-6621
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit b55fd37919)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
This commit is contained in:
@@ -11,6 +11,10 @@ GRAPHICSMAGICK_LICENSE = MIT
|
||||
GRAPHICSMAGICK_LICENSE_FILES = Copyright.txt
|
||||
GRAPHICSMAGICK_CPE_ID_VENDOR = graphicsmagick
|
||||
|
||||
# Wrong NVD annotations
|
||||
# Fixed in version 1.2.3
|
||||
GRAPHICSMAGICK_IGNORE_CVES += CVE-2008-6621
|
||||
|
||||
# 0001-ReadJXLImage-Apply-image-dimension-resource-limits.patch
|
||||
GRAPHICSMAGICK_IGNORE_CVES += CVE-2025-27795
|
||||
|
||||
|
||||
Reference in New Issue
Block a user