mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-30 22:11:59 -09:00
Prior to improving check-package to verify that the comment preceding a <pkg>_IGNORE_CVES entry mentions an existing patch, and that the patch itself contains a CVE: tag, we fix all problematic cases that currently exist in Buildroot: - In the case of binutils: the CVE was only applicable to binutils 2.43/2.44, and the oldest version now supported is 2.45, so the patch doesn't exist anymore in Buildroot - For x11vnc, fix a typo in the patch name - For gpsd the patches were dropped in [1] as they are included in the version bump - Similarly for micropython, the patches were dropped in [2] along with the version bump - For util-linux, strip the prefix "package/util-linux/", so that the patch is relative to the .mk file and can be found by the new check - Add missing 'CVE:' tag to net-tools patch 0001 [1]37ef4f862fpackage/gpsd: bump version to 3.27.2 [2]28eeca9a98package/micropython: bump to version 1.28.0 Signed-off-by: Titouan Christophe <titouan.christophe@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit636f69ab45) Signed-off-by: Thomas Perale <thomas.perale@mind.be>