[Buildroot] [git commit branch/2020.02.x] package/ncurses: mark CVE-2019-1759{4, 5} as fixed by 20191012 patch

Peter Korsgaard peter at korsgaard.com
Fri Dec 11 09:59:27 UTC 2020


commit: https://git.buildroot.net/buildroot/commit/?id=f79d1d62117da4253a1c597c787807c993cda30e
branch: https://git.buildroot.net/buildroot/commit/?id=refs/heads/2020.02.x

According to the NVE data, these are fixes in the 20191012 patch - So mark
them as such.

Signed-off-by: Peter Korsgaard <peter at korsgaard.com>
(cherry picked from commit f7fc4bf1b98a4f7a4c0ab90cd22a7b3b75a50706)
Signed-off-by: Peter Korsgaard <peter at korsgaard.com>
---
 package/ncurses/ncurses.mk | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/package/ncurses/ncurses.mk b/package/ncurses/ncurses.mk
index c11650c766..f4e4784a3c 100644
--- a/package/ncurses/ncurses.mk
+++ b/package/ncurses/ncurses.mk
@@ -50,6 +50,9 @@ NCURSES_PATCH = \
 		ncurses-6.1-20200118.patch.gz \
 	)
 
+# ncurses-6.1-20191012.patch.gz
+NCURSES_IGNORE_CVES += CVE-2019-17594 CVE-2019-17595
+
 NCURSES_CONF_OPTS = \
 	--without-cxx \
 	--without-cxx-binding \


More information about the buildroot mailing list