[Buildroot] [PATCH 1/1] package/links: annotate CVE-2008-3319

Fabrice Fontaine fontaine.fabrice at gmail.com
Sun Mar 1 20:14:08 UTC 2020


CVE-2008-3319 is misclassified (by our CVE tracker) as affecting links,
while in fact it affects Maian Links (https://www.maianlinks.com).

Signed-off-by: Fabrice Fontaine <fontaine.fabrice at gmail.com>
---
 package/links/links.mk | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/package/links/links.mk b/package/links/links.mk
index 228a8ed0ee..cc95ec2867 100644
--- a/package/links/links.mk
+++ b/package/links/links.mk
@@ -11,6 +11,10 @@ LINKS_DEPENDENCIES = host-pkgconf
 LINKS_LICENSE = GPL-2.0+
 LINKS_LICENSE_FILES = COPYING
 
+# CVE-2008-3319 is misclassified (by our CVE tracker) as affecting links, while
+# in fact it affects Maian Links (https://www.maianlinks.com).
+LINKS_IGNORE_CVES += CVE-2008-3319
+
 ifeq ($(BR2_PACKAGE_LINKS_GRAPHICS),y)
 LINKS_CONF_OPTS += --enable-graphics
 LINKS_DEPENDENCIES += libpng
-- 
2.25.0



More information about the buildroot mailing list