[Buildroot] [PATCH] package/avahi: ignore CVE-2021-26720

Peter Korsgaard peter at korsgaard.com
Thu Apr 8 07:32:36 UTC 2021


>>>>> "Arnout" == Arnout Vandecappelle <arnout at mind.be> writes:

 > On 07/04/2021 15:54, Peter Korsgaard wrote:
 >> CVE-2021-26720 is an issue in avahi-daemon-check-dns.sh, which is part of
 >> the Debian packaging and not part of upstream avahi - So ignore the CVE.
 >> 
 >> https://security-tracker.debian.org/tracker/CVE-2021-26720
 >> 
 >> Signed-off-by: Peter Korsgaard <peter at korsgaard.com>

 >  Applied to master, thanks.

 >  BTW, is there an easy way to run the CVE check for a single package? Or do you
 > really have to go through configure + pkg-stats?

I'm afraid so. Thomas?

-- 
Bye, Peter Korsgaard



More information about the buildroot mailing list