From e3a15862fbfc49a22f7cc94ef1fdd11abc701d7d Mon Sep 17 00:00:00 2001 From: Thomas Petazzoni Date: Sun, 18 May 2025 10:57:06 +0200 Subject: [PATCH] package/sox: annotate ignore CVE entries Commit b6871f9d93055ec94d6fb88779d44b3235b29ce9 ("package/sox: security bump to latest git commit") forgot to annotate the ignore CVE entries, so let's do this. Signed-off-by: Thomas Petazzoni Signed-off-by: Julien Olivain --- package/sox/sox.mk | 42 ++++++++++++++++++++++++++++++++++++++---- 1 file changed, 38 insertions(+), 4 deletions(-) diff --git a/package/sox/sox.mk b/package/sox/sox.mk index 42e47a916c..8922f98d5c 100644 --- a/package/sox/sox.mk +++ b/package/sox/sox.mk @@ -19,10 +19,44 @@ SOX_AUTORECONF = YES SOX_AUTORECONF_OPTS = --include=$(HOST_DIR)/share/autoconf-archive SOX_INSTALL_STAGING = YES -SOX_IGNORE_CVES += CVE-2017-11332 CVE-2017-11358 CVE-2017-11359 \ - CVE-2017-15370 CVE-2017-15371 CVE-2017-15372 CVE-2017-15642 \ - CVE-2017-18189 CVE-2019-8354 CVE-2019-8355 CVE-2019-8356 \ - CVE-2019-8357 CVE-2019-13590 +# sox-14.4.2-6-g6e177c45 +SOX_IGNORE_CVES += CVE-2017-11332 + +# sox-14.4.2-7-ge410d00c +SOX_IGNORE_CVES += CVE-2017-11358 + +# sox-14.4.2-8-g7b3f30e1 +SOX_IGNORE_CVES += CVE-2017-11359 + +# sox-14.4.2-9-ge076a7ad +SOX_IGNORE_CVES += CVE-2017-15370 + +# sox-14.4.2-10-g968c689a +SOX_IGNORE_CVES += CVE-2017-15371 + +# sox-14.4.2-11-g515b9861 +SOX_IGNORE_CVES += CVE-2017-15372 + +# sox-14.4.2-12-gf56c0dbc +SOX_IGNORE_CVES += CVE-2017-15642 + +# sox-14.4.2-13-g09d7388c +SOX_IGNORE_CVES += CVE-2017-18189 + +# sox-14.4.2-38-gf7091126 +SOX_IGNORE_CVES += CVE-2019-8354 + +# sox-14.4.2-39-gf8587e2d +SOX_IGNORE_CVES += CVE-2019-8355 + +# sox-14.4.2-40-gb7883ae1 +SOX_IGNORE_CVES += CVE-2019-8356 + +# sox-14.4.2-41-g2ce02fea +SOX_IGNORE_CVES += CVE-2019-8357 + +# sox-14.4.2-44-g7b6a8892 +SOX_IGNORE_CVES += CVE-2019-13590 SOX_CONF_OPTS = \ --with-distro="Buildroot" \