From f2e442a14d93fc99ab31e8eea96901500862f28a Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Sun, 28 Dec 2025 19:56:28 +0100 Subject: [PATCH] package/mupdf: remove stale IGNORE_CVES The fixes for the CVE-2024-24258 & CVE-2024-24259 were introduced in [1] and targeted the package libfreeglut. The patches that fixed CVE-2024-24258 & CVE-2024-24259 in libfreeglut were removed in Buildroot commit [2]. With this bump the IGNORE_CVES entries for mupdf were not removed. [1] 0f4fef076f package/libfreeglut: add upstream security fix for CVE-2024-2425{8, 9} [2] b1c77090ef package/libfreeglut: bump version to 3.6.0 Signed-off-by: Thomas Perale Signed-off-by: Thomas Petazzoni --- package/mupdf/mupdf.mk | 6 ------ 1 file changed, 6 deletions(-) diff --git a/package/mupdf/mupdf.mk b/package/mupdf/mupdf.mk index 6b666033eb..9eecb84232 100644 --- a/package/mupdf/mupdf.mk +++ b/package/mupdf/mupdf.mk @@ -21,12 +21,6 @@ MUPDF_DEPENDENCIES = \ lcms2 openjpeg \ zlib -# libfreeglut/0001-Plug-memory-leak-that-happens-upon-error.patch -# Fix is in libfreeglut, but CVE applied to mupdf. -MUPDF_IGNORE_CVES = \ - CVE-2024-24258 \ - CVE-2024-24259 - # mupdf doesn't use CFLAGS and LIBS but XCFLAGS and XLIBS instead. # with USE_SYSTEM_LIBS it will try to use system libraries instead of the bundled ones. MUPDF_MAKE_ENV = $(TARGET_MAKE_ENV) $(TARGET_CONFIGURE_OPTS) \