From: Matt Weber Date: Wed, 21 Apr 2021 20:42:27 +0000 (-0500) Subject: package/coreutils: ignore CVE-2013-0221, CVE-2013-0222, CVE-2013-0223 X-Git-Url: https://git.libre-soc.org/?a=commitdiff_plain;h=8ae9156d8b730689484927fba2ec2fa6c1dc0433;p=buildroot.git package/coreutils: ignore CVE-2013-0221, CVE-2013-0222, CVE-2013-0223 This CVE is only relevant to a build when the SUSE coreutils-i18n.patch is included. The upstream codebase does not include this patch, nor does Buildroot. https://security-tracker.debian.org/tracker/CVE-2013-0221 https://security-tracker.debian.org/tracker/CVE-2013-0222 https://security-tracker.debian.org/tracker/CVE-2013-0223 Signed-off-by: Matthew Weber Signed-off-by: Yann E. MORIN --- diff --git a/package/coreutils/coreutils.mk b/package/coreutils/coreutils.mk index 0e75cdfcda..65234a113e 100644 --- a/package/coreutils/coreutils.mk +++ b/package/coreutils/coreutils.mk @@ -10,6 +10,10 @@ COREUTILS_SOURCE = coreutils-$(COREUTILS_VERSION).tar.xz COREUTILS_LICENSE = GPL-3.0+ COREUTILS_LICENSE_FILES = COPYING COREUTILS_CPE_ID_VENDOR = gnu +# Only when including SUSE coreutils-i18n.patch +COREUTILS_IGNORE_CVES = CVE-2013-0221 +COREUTILS_IGNORE_CVES += CVE-2013-0222 +COREUTILS_IGNORE_CVES += CVE-2013-0223 # We're patching m4/pthread-cond.m4 COREUTILS_AUTORECONF = YES