[Buildroot] [git commit] package/mcrypt: annotate CVEs

Thomas Petazzoni thomas.petazzoni at bootlin.com
Sun Apr 5 14:25:43 UTC 2020


commit: https://git.buildroot.net/buildroot/commit/?id=cdfa84a80d204b2ac0c28103606c2dc4f8bb2f10
branch: https://git.buildroot.net/buildroot/commit/?id=refs/heads/master

Signed-off-by: Fabrice Fontaine <fontaine.fabrice at gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni at bootlin.com>
---
 package/mcrypt/mcrypt.mk | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/package/mcrypt/mcrypt.mk b/package/mcrypt/mcrypt.mk
index f98895f401..a04b973750 100644
--- a/package/mcrypt/mcrypt.mk
+++ b/package/mcrypt/mcrypt.mk
@@ -14,4 +14,11 @@ MCRYPT_CONF_OPTS = --with-libmcrypt-prefix=$(STAGING_DIR)/usr
 MCRYPT_LICENSE = GPL-3.0
 MCRYPT_LICENSE_FILES = COPYING
 
+# 0001-CVE-2012-4409.patch
+MCRYPT_IGNORE_CVES += CVE-2012-4409
+# 0002-CVE-2012-4426.patch
+MCRYPT_IGNORE_CVES += CVE-2012-4426
+# 0003-CVE-2012-4527.patch
+MCRYPT_IGNORE_CVES += CVE-2012-4527
+
 $(eval $(autotools-package))


More information about the buildroot mailing list