Kaynağa Gözat

package/libnids: ignore CVE-2010-0751

This CVE is falsely reported because it was fixed in package version
1.24 (which we are using). Ignore this CVE until the database is
updated.

Signed-off-by: Guillaume W. Bres <guillaume.bressaix@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Guillaume W. Bres 3 yıl önce
ebeveyn
işleme
5d6e2e5c98
1 değiştirilmiş dosya ile 4 ekleme ve 0 silme
  1. 4 0
      package/libnids/libnids.mk

+ 4 - 0
package/libnids/libnids.mk

@@ -12,6 +12,10 @@ LIBNIDS_INSTALL_STAGING = YES
 LIBNIDS_DEPENDENCIES = host-pkgconf libpcap
 LIBNIDS_AUTORECONF = YES
 
+# CVE-2010-0751 was fixed in libnids v1.24 but the NVD database is not
+# aware of the fix, ignore it until this is updated
+LIBNIDS_IGNORE_CVES += CVE-2010-0751
+
 # disable libnet if not available
 # Tests in configure.in expect --with-libnet=$build_dir
 # not an installation patch like in our context.