From 7ca4625da76069dc181d6c88eadffcbd3856d801 Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Mon, 29 Dec 2025 10:07:13 +0100 Subject: [PATCH] package/cups-filter: add CVE trailer in patch Since Buildroot commit [1] the patches that fixes a security vulnerability needs to reference the fixed vulnerability. This patch adds the relevant information to the patch header. [1] 1167d0ff3d docs/manual: mention CVE trailer Signed-off-by: Thomas Perale Signed-off-by: Thomas Petazzoni (cherry picked from commit c9b63b439c06c6bf485ff17dcf4477caded2d40e) Signed-off-by: Thomas Perale --- ...-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch | 1 + 1 file changed, 1 insertion(+) diff --git a/package/cups-filters/0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch b/package/cups-filters/0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch index e527b20f91..fbe2bfac4a 100644 --- a/package/cups-filters/0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch +++ b/package/cups-filters/0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch @@ -32,6 +32,7 @@ In addition, done the following fixes and improvements: - Use "static volatile int" for global variable job_canceled. +CVE: CVE-2023-24805 Upstream: https://github.com/OpenPrinting/cups-filters/commit/93e60d3df358c0ae6f3dba79e1c9684657683d89 Signed-off-by: Fabrice Fontaine ---