[Buildroot] [PATCH] package/fail2ban: drop CVE-2021-32749 from IGNORE_CVES

[Buildroot] [PATCH] package/fail2ban: drop CVE-2021-32749 from IGNORE_CVES

[Daniel Lang]

CVE-2021-32749 affects fail2ban <= 0.9.7, 0.10.0 through 0.10.6, and
0.11.0 through 0.11.2.
The mentioned patch was removed in 76853089 when bumping to 1.0.1.

Signed-off-by: Daniel Lang <dalang@gmx.at>
---
 package/fail2ban/fail2ban.mk | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/package/fail2ban/fail2ban.mk b/package/fail2ban/fail2ban.mk
index 828dfdd6e1..0c1208c6fe 100644
--- a/package/fail2ban/fail2ban.mk
+++ b/package/fail2ban/fail2ban.mk
@@ -12,9 +12,6 @@ FAIL2BAN_CPE_ID_VENDOR = fail2ban
 FAIL2BAN_SELINUX_MODULES = fail2ban
 FAIL2BAN_SETUP_TYPE = setuptools
 
-# 0001-fixed-possible-RCE-vulnerability-unset-escape-variable.patch
-FAIL2BAN_IGNORE_CVES += CVE-2021-32749
-
 define FAIL2BAN_PYTHON_2TO3
 	$(HOST_DIR)/bin/2to3 --write --nobackups --no-diffs $(@D)/bin/* $(@D)/fail2ban
 endef
-- 
2.42.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH] package/fail2ban: drop CVE-2021-32749 from IGNORE_CVES

[Thomas Petazzoni via buildroot]

On Thu, 21 Sep 2023 05:58:27 +0200
Daniel Lang <dalang@gmx.at> wrote:

> CVE-2021-32749 affects fail2ban <= 0.9.7, 0.10.0 through 0.10.6, and
> 0.11.0 through 0.11.2.
> The mentioned patch was removed in 76853089 when bumping to 1.0.1.
> 
> Signed-off-by: Daniel Lang <dalang@gmx.at>
> ---
>  package/fail2ban/fail2ban.mk | 3 ---
>  1 file changed, 3 deletions(-)

Applied to master, thanks.

Thomas
-- 
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH] package/fail2ban: drop CVE-2021-32749 from IGNORE_CVES

[Peter Korsgaard]

>>>>> "Daniel" == Daniel Lang <dalang@gmx.at> writes:

 > CVE-2021-32749 affects fail2ban <= 0.9.7, 0.10.0 through 0.10.6, and
 > 0.11.0 through 0.11.2.
 > The mentioned patch was removed in 76853089 when bumping to 1.0.1.

 > Signed-off-by: Daniel Lang <dalang@gmx.at>

Committed to 2023.02.x, 2023.05.x and 2023.08.x, thanks.

-- 
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot