From e7918ae91a1ec2440b84f45d6b1620251d187aa3 Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Tue, 30 Dec 2025 09:19:08 +0100 Subject: [PATCH] package/postgresql: remove stale IGNORE_CVES Since Buildroot commit [1] the CVEs are no longer matched to CPEs with versions using '-'. The CVE-2017-8806 is then no longer matched to the postgresql package. For more information, see the explanation in commit [1]. [1] 35f376d88e support/scripts/cve.py: fix CPE matching Signed-off-by: Thomas Perale Reviewed-by: Maxim Kochetkov Signed-off-by: Thomas Petazzoni (cherry picked from commit b1ca8ca4ba4814dfa11e840cc94341d966a6e911) Signed-off-by: Thomas Perale --- package/postgresql/postgresql.mk | 4 ---- 1 file changed, 4 deletions(-) diff --git a/package/postgresql/postgresql.mk b/package/postgresql/postgresql.mk index 86761bf939..13abce8330 100644 --- a/package/postgresql/postgresql.mk +++ b/package/postgresql/postgresql.mk @@ -28,10 +28,6 @@ POSTGRESQL_DEPENDENCIES = \ host-bison \ host-flex -# CVE-2017-8806 is related to postgresql-common package -# It is false positive for postgresql -POSTGRESQL_IGNORE_CVES += CVE-2017-8806 - ifeq ($(BR2_PACKAGE_POSTGRESQL_FULL),y) POSTGRESQL_NINJA_OPTS += world POSTGRESQL_INSTALL_TARGET_OPTS += DESTDIR=$(TARGET_DIR) install-world