[Buildroot] [PATCH 2/2] package/libuci: ignore CVE-2019-15513
Fabrice Fontaine
fontaine.fabrice at gmail.com
Sat Jul 17 21:48:54 UTC 2021
Commit 19e29ffc15dbd958e8e6a648ee0982c68353516f is older than LIBUCI_VERSION
Signed-off-by: Fabrice Fontaine <fontaine.fabrice at gmail.com>
---
package/libuci/libuci.mk | 3 +++
1 file changed, 3 insertions(+)
diff --git a/package/libuci/libuci.mk b/package/libuci/libuci.mk
index ae70b6f2af..5288b08406 100644
--- a/package/libuci/libuci.mk
+++ b/package/libuci/libuci.mk
@@ -13,6 +13,9 @@ LIBUCI_CPE_ID_VENDOR = openwrt
LIBUCI_INSTALL_STAGING = YES
LIBUCI_DEPENDENCIES = libubox
+# Commit 19e29ffc15dbd958e8e6a648ee0982c68353516f is older than LIBUCI_VERSION
+LIBUCI_IGNORE_CVES += CVE-2019-15513
+
ifeq ($(BR2_PACKAGE_LUA_5_1),y)
LIBUCI_DEPENDENCIES += lua
LIBUCI_CONF_OPTS += -DBUILD_LUA=ON \
--
2.30.2
More information about the buildroot
mailing list