mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-19 16:40:46 -09:00
The IGNORE_CVES entries introduced in [1] no longer match to the glibc package following the bump to v2.42 in [2]. The version boundaries specified on the NVD DB are specific to 2.40 & 2.41. The CVE-2025-8058 though don't have any information available on the NVD DB and will remain on the IGNORE_CVES then. [1]feaf53585apackage/glibc: security bump to version 2.41-70 [2]fb6256c0efpackage/{glibc, localdef}: bump to version 2.42 Signed-off-by: Thomas Perale <thomas.perale@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>