package/libnids: ignore CVE-2010-0751

This CVE is falsely reported because it was fixed in package version
1.24 (which we are using). Ignore this CVE until the database is
updated.

Signed-off-by: Guillaume W. Bres <guillaume.bressaix@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>

diff --git a/package/libnids/libnids.mk b/package/libnids/libnids.mk
index 4a67215242ae42cfb9235389b99cbdf69b7aeae3..fb3df318b478970d480a5dc285d885e1e4deba5f 100644 (file)
--- a/package/libnids/libnids.mk
+++ b/package/libnids/libnids.mk
@@ -12,6 +12,10 @@ LIBNIDS_INSTALL_STAGING = YES
 LIBNIDS_DEPENDENCIES = host-pkgconf libpcap
 LIBNIDS_AUTORECONF = YES
 
+# CVE-2010-0751 was fixed in libnids v1.24 but the NVD database is not
+# aware of the fix, ignore it until this is updated
+LIBNIDS_IGNORE_CVES += CVE-2010-0751
+
 # disable libnet if not available
 # Tests in configure.in expect --with-libnet=$build_dir
 # not an installation patch like in our context.