From f5ad99c02a0925f52223ab8ab46b8d9ec66de74b Mon Sep 17 00:00:00 2001 From: Titouan Christophe Date: Thu, 3 Jul 2025 11:11:34 +0200 Subject: [PATCH] package/php: ignore CVE-2024-3566 that only affects Windows For reference, see: https://www.cve.org/CVERecord?id=CVE-2024-3566 Signed-off-by: Titouan Christophe [Julien: add link to CVE in commit log] Signed-off-by: Julien Olivain (cherry picked from commit 7c0e9d795a4896fd29e533bb4e0f55ec7b76421b) Signed-off-by: Thomas Perale --- package/php/php.mk | 3 +++ 1 file changed, 3 insertions(+) diff --git a/package/php/php.mk b/package/php/php.mk index 01166bae64..a049d90fde 100644 --- a/package/php/php.mk +++ b/package/php/php.mk @@ -15,6 +15,9 @@ PHP_LICENSE = PHP-3.01 PHP_LICENSE_FILES = LICENSE PHP_CPE_ID_VENDOR = php +# Only affects the Windows operating system +PHP_IGNORE_CVES += CVE-2024-3566 + PHP_CONF_OPTS = \ --mandir=/usr/share/man \ --infodir=/usr/share/info \