From 6c04bdf56d217d25db72877682da370756084ace Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Tue, 3 Mar 2026 09:13:20 +0100 Subject: [PATCH] package/graphicsmagick: add CVE-2008-6621 to IGNORE_CVES This vulnerability match on every version of graphicsmagick. Since it's really old it's unlikely it will be updated and is thus added to IGNORE_CVES. See [1]. [1] https://nvd.nist.gov//vuln/detail/CVE-2008-6621 Signed-off-by: Thomas Perale Signed-off-by: Julien Olivain (cherry picked from commit b55fd37919e40c700251d0b8e9e10c73be048d5d) Signed-off-by: Thomas Perale --- package/graphicsmagick/graphicsmagick.mk | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/package/graphicsmagick/graphicsmagick.mk b/package/graphicsmagick/graphicsmagick.mk index 4b9f3bd23c..40107b3aae 100644 --- a/package/graphicsmagick/graphicsmagick.mk +++ b/package/graphicsmagick/graphicsmagick.mk @@ -11,6 +11,10 @@ GRAPHICSMAGICK_LICENSE = MIT GRAPHICSMAGICK_LICENSE_FILES = Copyright.txt GRAPHICSMAGICK_CPE_ID_VENDOR = graphicsmagick +# Wrong NVD annotations +# Fixed in version 1.2.3 +GRAPHICSMAGICK_IGNORE_CVES += CVE-2008-6621 + # 0001-ReadJXLImage-Apply-image-dimension-resource-limits.patch GRAPHICSMAGICK_IGNORE_CVES += CVE-2025-27795