diff --git a/package/glibc/glibc.mk b/package/glibc/glibc.mk index 8a31779afb..98e7db7b4b 100644 --- a/package/glibc/glibc.mk +++ b/package/glibc/glibc.mk @@ -44,6 +44,20 @@ GLIBC_IGNORE_CVES += CVE-2023-4911 # 2.36 and the version we're really using. GLIBC_IGNORE_CVES += CVE-2023-5156 +# All these CVEs are considered as not being security issues by +# upstream glibc: +# https://security-tracker.debian.org/tracker/CVE-2010-4756 +# https://security-tracker.debian.org/tracker/CVE-2019-1010022 +# https://security-tracker.debian.org/tracker/CVE-2019-1010023 +# https://security-tracker.debian.org/tracker/CVE-2019-1010024 +# https://security-tracker.debian.org/tracker/CVE-2019-1010025 +GLIBC_IGNORE_CVES += \ + CVE-2010-4756 \ + CVE-2019-1010022 \ + CVE-2019-1010023 \ + CVE-2019-1010024 \ + CVE-2019-1010025 + # glibc is part of the toolchain so disable the toolchain dependency GLIBC_ADD_TOOLCHAIN_DEPENDENCY = NO