mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-11-14 16:52:08 -10:00
An analysis of the last 3 remaining CVEs that are reported to affect the grub2 package has allowed to ensure that we can safely ignore them: * CVE-2020-14372 is already fixed by a patch we have in our patch stack for grub2 * CVE-2019-14865 and CVE-2020-15705 are both distro-specific and do not affect grub2 upstream, nor grub2 with the stack of patches we have in Buildroot Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>