mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-30 22:11:59 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/mupdf: add CVE-2024-2425{8, 9} to IGNORE_CVES

Browse Source 
Buildroot commit [1] removed the IGNORE_CVES entries for
CVE-2024-24258 & CVE-2024-24259 because they referenced a patches no
longer existing.

Those IGNORE_CVES entries are still required because the CVEs reference
the exact mupdf version Buildroot is using.

Re-introduce those IGNORE_CVES entries with an updated comment instead.

[1] f2e442a14d package/mupdf: remove stale IGNORE_CVES

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit a8e7e6c852)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
This commit is contained in:
Thomas Perale
2025-12-29 10:07:19 +01:00
parent 070d7302f2
commit e985152990
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
package/mupdf/mupdf.mk
View File

@@ -21,6 +21,12 @@ MUPDF_DEPENDENCIES = \
lcms2 openjpeg \ lcms2 openjpeg \
zlib zlib
# Fix is in libfreeglut, but CVE applied to mupdf 1.23.9.
# Buildroot libfreeglut is >3.4.0 then is not affected.
MUPDF_IGNORE_CVES = \
CVE-2024-24258 \
CVE-2024-24259
# mupdf doesn't use CFLAGS and LIBS but XCFLAGS and XLIBS instead. # mupdf doesn't use CFLAGS and LIBS but XCFLAGS and XLIBS instead.
# with USE_SYSTEM_LIBS it will try to use system libraries instead of the bundled ones. # with USE_SYSTEM_LIBS it will try to use system libraries instead of the bundled ones.
MUPDF_MAKE_ENV = $(TARGET_MAKE_ENV) $(TARGET_CONFIGURE_OPTS) \ MUPDF_MAKE_ENV = $(TARGET_MAKE_ENV) $(TARGET_CONFIGURE_OPTS) \