From e15bf2dcace239db96063718863e850ffbafe1e6 Mon Sep 17 00:00:00 2001 From: Daniel Lang Date: Mon, 2 Jun 2025 21:04:16 +0200 Subject: [PATCH] package/ninja: ignore CVE-2021-4336 CVE is filed against a different project. Signed-off-by: Daniel Lang Signed-off-by: Peter Korsgaard (cherry picked from commit f1b759d34a59460b6754223ea05f8ee948b92abe) Signed-off-by: Thomas Perale --- package/ninja/ninja.mk | 3 +++ 1 file changed, 3 insertions(+) diff --git a/package/ninja/ninja.mk b/package/ninja/ninja.mk index b7bc1a4f1c..805fef4541 100644 --- a/package/ninja/ninja.mk +++ b/package/ninja/ninja.mk @@ -10,6 +10,9 @@ NINJA_SITE = $(call github,Kitware,ninja,v$(NINJA_VERSION)) NINJA_LICENSE = Apache-2.0 NINJA_LICENSE_FILES = COPYING +# Filed against a different project called monitor-ninja +NINJA_IGNORE_CVES += CVE-2021-4336 + define HOST_NINJA_INSTALL_CMDS $(INSTALL) -m 0755 -D $(@D)/ninja $(HOST_DIR)/bin/ninja endef