From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from smtp3.osuosl.org (smtp3.osuosl.org [140.211.166.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id B9629C3ABD8 for ; Sun, 18 May 2025 08:57:49 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by smtp3.osuosl.org (Postfix) with ESMTP id 873F860E52; Sun, 18 May 2025 08:57:49 +0000 (UTC) X-Virus-Scanned: amavis at osuosl.org Received: from smtp3.osuosl.org ([127.0.0.1]) by localhost (smtp3.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP id qeEps138nv8W; Sun, 18 May 2025 08:57:48 +0000 (UTC) X-Comment: SPF check N/A for local connections - client-ip=140.211.166.142; helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org; receiver= DKIM-Filter: OpenDKIM Filter v2.11.0 smtp3.osuosl.org 9C22E60E48 Received: from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142]) by smtp3.osuosl.org (Postfix) with ESMTP id 9C22E60E48; Sun, 18 May 2025 08:57:48 +0000 (UTC) Received: from smtp1.osuosl.org (smtp1.osuosl.org [IPv6:2605:bc80:3010::138]) by lists1.osuosl.org (Postfix) with ESMTP id 39231E4 for ; Sun, 18 May 2025 08:57:34 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by smtp1.osuosl.org (Postfix) with ESMTP id 9FEF281275 for ; Sun, 18 May 2025 08:57:33 +0000 (UTC) X-Virus-Scanned: amavis at osuosl.org Received: from smtp1.osuosl.org ([127.0.0.1]) by localhost (smtp1.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP id 0lBYmimpKD4D for ; Sun, 18 May 2025 08:57:33 +0000 (UTC) Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=217.70.183.197; helo=relay5-d.mail.gandi.net; envelope-from=thomas.petazzoni@bootlin.com; receiver= DMARC-Filter: OpenDMARC Filter v1.4.2 smtp1.osuosl.org 5AC4D81255 DKIM-Filter: OpenDKIM Filter v2.11.0 smtp1.osuosl.org 5AC4D81255 Received: from relay5-d.mail.gandi.net (relay5-d.mail.gandi.net [217.70.183.197]) by smtp1.osuosl.org (Postfix) with ESMTPS id 5AC4D81255 for ; Sun, 18 May 2025 08:57:32 +0000 (UTC) Received: by mail.gandi.net (Postfix) with ESMTPA id 26C7E432FC; Sun, 18 May 2025 08:57:29 +0000 (UTC) To: Buildroot List Cc: =?UTF-8?q?Rapha=C3=ABl=20M=C3=A9lotte?= , Thomas Petazzoni , Bernd Kuhls , Luca Ceresoli Date: Sun, 18 May 2025 10:56:59 +0200 Message-ID: <20250518085723.23020-7-thomas.petazzoni@bootlin.com> X-Mailer: git-send-email 2.49.0 In-Reply-To: <20250518085723.23020-1-thomas.petazzoni@bootlin.com> References: <20250518085723.23020-1-thomas.petazzoni@bootlin.com> MIME-Version: 1.0 X-GND-State: clean X-GND-Score: -100 X-GND-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdefudektdelucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuifetpfffkfdpucggtfgfnhhsuhgsshgtrhhisggvnecuuegrihhlohhuthemuceftddunecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefvhhhomhgrshcurfgvthgriiiiohhnihcuoehthhhomhgrshdrphgvthgriiiiohhnihessghoohhtlhhinhdrtghomheqnecuggftrfgrthhtvghrnhepgefhfeeviedtueefhefhvdejveffveehvdeifefffffgjeduvdelteffveehveffnecuffhomhgrihhnpehkvghrnhgvlhdrohhrghenucfkphepvdgrtddvmeekgedvrgemgeehrggtmeelgedtudemugefudgvmedvfeehmegthegvvdemvggukeefnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepvdgrtddvmeekgedvrgemgeehrggtmeelgedtudemugefudgvmedvfeehmegthegvvdemvggukeefpdhhvghlohepfihinhgushhurhhfrddrpdhmrghilhhfrhhomhepthhhohhmrghsrdhpvghtrgiiiihonhhisegsohhothhlihhnrdgtohhmpdhnsggprhgtphhtthhopeehpdhrtghpthhtohepsghuihhlughrohhothessghuihhlughrohhothdrohhrghdprhgtphhtthhopehrrghphhgrvghlrdhmvghlohhtthgvsehmihhnugdrsggvpdhrtghpthhtohepthhho hhmrghsrdhpvghtrgiiiihonhhisegsohhothhlihhnrdgtohhmpdhrtghpthhtohepsggvrhhnugeskhhuhhhlshdrnhgvthdprhgtphhtthhopehluhgtrgdrtggvrhgvshholhhisegsohhothhlihhnrdgtohhm X-GND-Sasl: thomas.petazzoni@bootlin.com X-Mailman-Original-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bootlin.com; s=gm1; t=1747558649; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=VnduzCpG6+E8WAgAeq8G2wchhLnjRRTkK+zz5cG6XL4=; b=CN25/VO9KfHQ5zhSyXvostVXvLw8HCyCdt4a5KlNV6kteEzc/CTUmA7xl9+qLfpE1hlcFe +3KGXYgevwANaGK/EW5bxcYsSvqoh2UYAZ2MvNoVjwQ0x+2oti/rzEj3oW7pzC/9KScC8l F8T6veP6AThQU3PSxWVew+bM+vD0m3tz0k/pgJxJgS2OqNBsE3XeL1DkK0vZ4r1BzfZS+J 336qduA0cH7LkEXn8RdUmKAQr8+/yqfrYOJ46a+ajQpTGhH8IX+FuHw2bOrkjgGS9Y8vMP /DilDnDV+hFvhitDaVXMHdofr3wuI5ynYc5i4i8NalZq6olRhqUatzXzepJrRA== X-Mailman-Original-Authentication-Results: smtp1.osuosl.org; dmarc=pass (p=reject dis=none) header.from=bootlin.com X-Mailman-Original-Authentication-Results: smtp1.osuosl.org; dkim=pass (2048-bit key, unprotected) header.d=bootlin.com header.i=@bootlin.com header.a=rsa-sha256 header.s=gm1 header.b=CN25/VO9 Subject: [Buildroot] [PATCH 06/22] package/exim: update comment on CVE-2022-3559 X-BeenThere: buildroot@buildroot.org X-Mailman-Version: 2.1.30 Precedence: list List-Id: Discussion and development of buildroot List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , From: Thomas Petazzoni via buildroot Reply-To: Thomas Petazzoni Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: buildroot-bounces@buildroot.org Sender: "buildroot" We no longer have the patch fixing CVE-2022-3559 because we've updated to a version of exim that includes it. However, the ignore CVE entry is not stale because the NVD database is incorrect on this CVE. We reported the issue to upstream NVD at: https://lore.kernel.org/buildroot/20250517183423.07951665@windsurf/ Let's document this above the ignore CVE entry. Signed-off-by: Thomas Petazzoni --- package/exim/exim.mk | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/package/exim/exim.mk b/package/exim/exim.mk index bee3a79808..6fa16e69a2 100644 --- a/package/exim/exim.mk +++ b/package/exim/exim.mk @@ -13,7 +13,8 @@ EXIM_CPE_ID_VENDOR = exim EXIM_SELINUX_MODULES = exim mta EXIM_DEPENDENCIES = host-berkeleydb host-pcre2 pcre2 berkeleydb host-pkgconf -# 0006-Fix-regex-n-use-after-free.-Bug-2915.patch +# Incorrect NVD database, reported at +# https://lore.kernel.org/buildroot/20250517183423.07951665@windsurf/ EXIM_IGNORE_CVES += CVE-2022-3559 # Modify a variable value. It must already exist in the file, either -- 2.49.0 _______________________________________________ buildroot mailing list buildroot@buildroot.org https://lists.buildroot.org/mailman/listinfo/buildroot