All of lore.kernel.org
 help / color / mirror / Atom feed
* [Buildroot] [git commit] package/qemu: remove leftover QEMU_IGNORE_CVES from Qemu 8.1
@ 2024-10-28 21:33 Thomas Petazzoni via buildroot
  2024-11-13 15:58 ` Peter Korsgaard
  0 siblings, 1 reply; 2+ messages in thread
From: Thomas Petazzoni via buildroot @ 2024-10-28 21:33 UTC (permalink / raw)
  To: buildroot

commit: https://git.buildroot.net/buildroot/commit/?id=10b4c31b812128f255e8ea58050879b953d58f0e
branch: https://git.buildroot.net/buildroot/commit/?id=refs/heads/master

Theses CVE are no longer listed by pkg-stats:

  https://nvd.nist.gov/vuln/detail/CVE-2023-4135
  https://nvd.nist.gov/vuln/detail/CVE-2023-3354
  https://nvd.nist.gov/vuln/detail/CVE-2023-3180

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
---
 package/qemu/qemu.mk | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/package/qemu/qemu.mk b/package/qemu/qemu.mk
index 16cff13d18..a2d164d189 100644
--- a/package/qemu/qemu.mk
+++ b/package/qemu/qemu.mk
@@ -17,12 +17,6 @@ QEMU_LICENSE_FILES = COPYING COPYING.LIB
 #       individual source files.
 QEMU_CPE_ID_VENDOR = qemu
 
-# Need to ignore the following CVEs because the CPE database does
-# not have an entry for the 8.1.1 version yet.
-QEMU_IGNORE_CVES += CVE-2023-4135
-QEMU_IGNORE_CVES += CVE-2023-3354
-QEMU_IGNORE_CVES += CVE-2023-3180
-
 #-------------------------------------------------------------
 
 # The build system is now partly based on Meson.
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply related	[flat|nested] 2+ messages in thread

* Re: [Buildroot] [git commit] package/qemu: remove leftover QEMU_IGNORE_CVES from Qemu 8.1
  2024-10-28 21:33 [Buildroot] [git commit] package/qemu: remove leftover QEMU_IGNORE_CVES from Qemu 8.1 Thomas Petazzoni via buildroot
@ 2024-11-13 15:58 ` Peter Korsgaard
  0 siblings, 0 replies; 2+ messages in thread
From: Peter Korsgaard @ 2024-11-13 15:58 UTC (permalink / raw)
  To: Thomas Petazzoni via buildroot; +Cc: Thomas Petazzoni

>>>>> "Thomas" == Thomas Petazzoni via buildroot <buildroot@buildroot.org> writes:

 > commit: https://git.buildroot.net/buildroot/commit/?id=10b4c31b812128f255e8ea58050879b953d58f0e
 > branch: https://git.buildroot.net/buildroot/commit/?id=refs/heads/master

 > Theses CVE are no longer listed by pkg-stats:

 >   https://nvd.nist.gov/vuln/detail/CVE-2023-4135
 >   https://nvd.nist.gov/vuln/detail/CVE-2023-3354
 >   https://nvd.nist.gov/vuln/detail/CVE-2023-3180

 > Signed-off-by: Romain Naour <romain.naour@smile.fr>
 > Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>

Committed to 2024.08.x, thanks.

-- 
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2024-11-13 15:59 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2024-10-28 21:33 [Buildroot] [git commit] package/qemu: remove leftover QEMU_IGNORE_CVES from Qemu 8.1 Thomas Petazzoni via buildroot
2024-11-13 15:58 ` Peter Korsgaard

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.