From: Matt Weber Date: Wed, 21 Apr 2021 20:42:33 +0000 (-0500) Subject: package/ncurses: ignore CVE-2018-10754, CVE-2018-19211, CVE-2018-19217, CVE-2019... X-Git-Url: https://git.libre-soc.org/?a=commitdiff_plain;h=675769791bd43de18b6bbeec2b4b48772a541a7a;p=buildroot.git package/ncurses: ignore CVE-2018-10754, CVE-2018-19211, CVE-2018-19217, CVE-2019-17594, CVE-2019-17595 Commit 4b21273d71d09 added upstream (security) patches up to 20200118 and in the commit description it outlines these CVEs were patched. Signed-off-by: Matthew Weber Signed-off-by: Yann E. MORIN --- diff --git a/package/ncurses/ncurses.mk b/package/ncurses/ncurses.mk index 97e3e2c321..5d9c6bb0dd 100644 --- a/package/ncurses/ncurses.mk +++ b/package/ncurses/ncurses.mk @@ -11,6 +11,12 @@ NCURSES_DEPENDENCIES = host-ncurses NCURSES_LICENSE = MIT with advertising clause NCURSES_LICENSE_FILES = COPYING NCURSES_CPE_ID_VENDOR = gnu +# Commit 4b21273d71d09 added upstream (security) patches up to 20200118 +NCURSES_IGNORE_CVES += CVE-2018-10754 +NCURSES_IGNORE_CVES += CVE-2018-19211 +NCURSES_IGNORE_CVES += CVE-2018-19217 +NCURSES_IGNORE_CVES += CVE-2019-17594 +NCURSES_IGNORE_CVES += CVE-2019-17595 NCURSES_CONFIG_SCRIPTS = ncurses$(NCURSES_LIB_SUFFIX)6-config NCURSES_PATCH = \ $(addprefix https://invisible-mirror.net/archives/ncurses/$(NCURSES_VERSION)/, \