[Buildroot] [PATCH] package/exim: drop stale CVE-2022-3559

[Buildroot] [PATCH] package/exim: drop stale CVE-2022-3559

[Daniel Lang via buildroot]

The CVE database was updated and includes the additional "up to
(including) 4.97" version information.

Signed-off-by: Daniel Lang <dalang@gmx.at>
---
 package/exim/exim.mk | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/package/exim/exim.mk b/package/exim/exim.mk
index 6fa16e69a2..3afe553caa 100644
--- a/package/exim/exim.mk
+++ b/package/exim/exim.mk
@@ -13,10 +13,6 @@ EXIM_CPE_ID_VENDOR = exim
 EXIM_SELINUX_MODULES = exim mta
 EXIM_DEPENDENCIES = host-berkeleydb host-pcre2 pcre2 berkeleydb host-pkgconf
 
-# Incorrect NVD database, reported at
-# https://lore.kernel.org/buildroot/20250517183423.07951665@windsurf/
-EXIM_IGNORE_CVES += CVE-2022-3559
-
 # Modify a variable value. It must already exist in the file, either
 # commented or not.
 define exim-config-change # variable-name, variable-value
-- 
2.49.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH] package/exim: drop stale CVE-2022-3559

[Luca Ceresoli via buildroot]

On Mon,  2 Jun 2025 20:40:48 +0200
Daniel Lang <dalang@gmx.at> wrote:

> The CVE database was updated and includes the additional "up to
> (including) 4.97" version information.
> 
> Signed-off-by: Daniel Lang <dalang@gmx.at>

Reviewed-by: Luca Ceresoli <luca.ceresoli@bootlin.com>

-- 
Luca Ceresoli, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH] package/exim: drop stale CVE-2022-3559

[Peter Korsgaard]

>>>>> "Daniel" == Daniel Lang via buildroot <buildroot@buildroot.org> writes:

 > The CVE database was updated and includes the additional "up to
 > (including) 4.97" version information.

 > Signed-off-by: Daniel Lang <dalang@gmx.at>

Committed, thanks.

-- 
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH] package/exim: drop stale CVE-2022-3559

[Arnout Vandecappelle via buildroot]

On 02/06/2025 20:40, Daniel Lang via buildroot wrote:
> The CVE database was updated and includes the additional "up to
> (including) 4.97" version information.
> 
> Signed-off-by: Daniel Lang <dalang@gmx.at>

  Applied to 2025.02.x, thanks.

  Regards,
  Arnout

> ---
>   package/exim/exim.mk | 4 ----
>   1 file changed, 4 deletions(-)
> 
> diff --git a/package/exim/exim.mk b/package/exim/exim.mk
> index 6fa16e69a2..3afe553caa 100644
> --- a/package/exim/exim.mk
> +++ b/package/exim/exim.mk
> @@ -13,10 +13,6 @@ EXIM_CPE_ID_VENDOR = exim
>   EXIM_SELINUX_MODULES = exim mta
>   EXIM_DEPENDENCIES = host-berkeleydb host-pcre2 pcre2 berkeleydb host-pkgconf
>   
> -# Incorrect NVD database, reported at
> -# https://lore.kernel.org/buildroot/20250517183423.07951665@windsurf/
> -EXIM_IGNORE_CVES += CVE-2022-3559
> -
>   # Modify a variable value. It must already exist in the file, either
>   # commented or not.
>   define exim-config-change # variable-name, variable-value

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot