From: Peter Korsgaard Date: Wed, 7 Apr 2021 13:54:23 +0000 (+0200) Subject: package/avahi: ignore CVE-2021-26720 X-Git-Url: https://git.libre-soc.org/?a=commitdiff_plain;h=3eadd7674061f6165b08ca0e99864e0cf26b090e;p=buildroot.git package/avahi: ignore CVE-2021-26720 CVE-2021-26720 is an issue in avahi-daemon-check-dns.sh, which is part of the Debian packaging and not part of upstream avahi - So ignore the CVE. https://security-tracker.debian.org/tracker/CVE-2021-26720 Signed-off-by: Peter Korsgaard Signed-off-by: Arnout Vandecappelle (Essensium/Mind) --- diff --git a/package/avahi/avahi.mk b/package/avahi/avahi.mk index e2b27328cd..b71fc189a0 100644 --- a/package/avahi/avahi.mk +++ b/package/avahi/avahi.mk @@ -11,6 +11,10 @@ AVAHI_LICENSE_FILES = LICENSE AVAHI_CPE_ID_VENDOR = avahi AVAHI_INSTALL_STAGING = YES +# CVE-2021-26720 is an issue in avahi-daemon-check-dns.sh, which is +# part of the Debian packaging and not part of upstream avahi +AVAHI_IGNORE_CVES += CVE-2021-26720 + AVAHI_CONF_ENV = \ avahi_cv_sys_cxx_works=yes \ DATADIRNAME=share