mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-30 05:51:45 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/dovecot: remove stale IGNORE_CVES

Browse Source 
Since Buildroot commit [1] the CVEs are no longer matched to CPEs with
versions using '-'.

These IGNORE_CVES entry introduced in [2] is then no longer matched to
the dovecot package.

For more information, see the explanation in commit [1].

[1] 35f376d88e support/scripts/cve.py: fix CPE matching
[2] 948e71689a package/dovecot: ignore CVE-2016-4983

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
This commit is contained in:
Thomas Perale
2025-12-30 09:19:16 +01:00
committed by Thomas Petazzoni
parent b3007ebcaf
commit 9dbd14df22
1 changed files with 0 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
package/dovecot/dovecot.mk
View File

@@ -21,12 +21,7 @@ DOVECOT_DEPENDENCIES = \
$(if $(BR2_PACKAGE_LIBICONV),libiconv) \ $(if $(BR2_PACKAGE_LIBICONV),libiconv) \
openssl openssl
# CVE-2016-4983 is an issue in a postinstall script in the dovecot rpm, which
# is part of the Red Hat packaging and not part of upstream dovecot
DOVECOT_IGNORE_CVES += CVE-2016-4983
# 0001-auth-Fix-handling-passdbs-with-identical-driver-args.patch # 0001-auth-Fix-handling-passdbs-with-identical-driver-args.patch
# Note: this ignore CVE entry is reported as stale by pkg-stats, but # Note: this ignore CVE entry is reported as stale by pkg-stats, but
# the NVD database is incorrect: # the NVD database is incorrect:
# https://lore.kernel.org/buildroot/20250517181815.02ce0393@windsurf/ # https://lore.kernel.org/buildroot/20250517181815.02ce0393@windsurf/