From: Thomas Perale via buildroot <buildroot@buildroot.org>
To: buildroot@buildroot.org
Cc: Thomas Perale <thomas.perale@mind.be>,
Ricardo Martincoski <ricardo.martincoski@datacom.com.br>
Subject: [Buildroot] [RFC PATCH 09/14] package/luajit: add details to vulnerabilities
Date: Wed, 24 Jun 2026 16:06:40 +0200 [thread overview]
Message-ID: <20260624140645.185318-10-thomas.perale@mind.be> (raw)
In-Reply-To: <20260624140645.185318-1-thomas.perale@mind.be>
Those vulnerabilities has already been addressed upstream but no new
package version have been released with those fixes.
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
---
package/luajit/luajit.mk | 15 ++++++++++-----
1 file changed, 10 insertions(+), 5 deletions(-)
diff --git a/package/luajit/luajit.mk b/package/luajit/luajit.mk
index bbd423ad02..ef3e840f8d 100644
--- a/package/luajit/luajit.mk
+++ b/package/luajit/luajit.mk
@@ -12,20 +12,25 @@ LUAJIT_CPE_ID_VENDOR = luajit
LUAJIT_CPE_ID_VERSION = 2.1.0
LUAJIT_CPE_ID_UPDATE = beta3
-# Fixed in 53f82e6e2e858a0a62fd1a2ff47e9866693382e6
LUAJIT_IGNORE_CVES += CVE-2020-15890
+LUAJIT_CVE-2020-15890_STATUS = fixed
+LUAJIT_CVE-2020-15890_DETAIL = 53f82e6e2e858a0a62fd1a2ff47e9866693382e6
-# Fixed in e296f56b825c688c3530a981dc6b495d972f3d01
LUAJIT_IGNORE_CVES += CVE-2020-24372
+LUAJIT_CVE-2020-24372_STATUS = fixed
+LUAJIT_CVE-2020-24372_DETAIL = e296f56b825c688c3530a981dc6b495d972f3d01
-# Fixed in 343ce0edaf3906a62022936175b2f5410024cbfc
LUAJIT_IGNORE_CVES += CVE-2024-25176
+LUAJIT_CVE-2024-25176_STATUS = fixed
+LUAJIT_CVE-2024-25176_DETAIL = 343ce0edaf3906a62022936175b2f5410024cbfc
-# Fixed in 85b4fed0b0353dd78c8c875c2f562d522a2b310f
LUAJIT_IGNORE_CVES += CVE-2024-25177
+LUAJIT_CVE-2024-25177_STATUS = fixed
+LUAJIT_CVE-2024-25177_DETAIL = 85b4fed0b0353dd78c8c875c2f562d522a2b310f
-# Fixed in defe61a56751a0db5f00ff3ab7b8f45436ba74c8
LUAJIT_IGNORE_CVES += CVE-2024-25178
+LUAJIT_CVE-2024-25178_STATUS = fixed
+LUAJIT_CVE-2024-25178_DETAIL = defe61a56751a0db5f00ff3ab7b8f45436ba74c8
LUAJIT_INSTALL_STAGING = YES
--
2.54.0
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
next prev parent reply other threads:[~2026-06-24 14:07 UTC|newest]
Thread overview: 20+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-06-24 14:06 [Buildroot] [RFC PATCH 00/14] Add exportable vulnerability informations Thomas Perale via buildroot
2026-06-24 14:06 ` [Buildroot] [RFC PATCH 01/14] docs/manual: add vulnerability status and justification Thomas Perale via buildroot
2026-06-24 14:06 ` [Buildroot] [RFC PATCH 02/14] utils/checkpackagelib/lib_mk.py: check _STATUS value is supported Thomas Perale via buildroot
2026-06-24 14:06 ` [Buildroot] [RFC PATCH 03/14] package/pkg-utils: show-info expose vuln details Thomas Perale via buildroot
2026-06-24 14:06 ` [Buildroot] [RFC PATCH 04/14] utils/generate-cyclonedx: support vulnerability details Thomas Perale via buildroot
2026-06-25 18:01 ` Fiona Klute via buildroot
2026-06-24 14:06 ` [Buildroot] [RFC PATCH 05/14] package/sox: add vulnerabilities details Thomas Perale via buildroot
2026-06-24 14:06 ` [Buildroot] [RFC PATCH 06/14] package/php: add vulnerability details Thomas Perale via buildroot
2026-06-24 14:06 ` [Buildroot] [RFC PATCH 07/14] package/mupdf: add vulnerabilities details Thomas Perale via buildroot
2026-06-24 14:06 ` [Buildroot] [RFC PATCH 08/14] package/python-pip: add detail to vulnerability Thomas Perale via buildroot
2026-06-25 17:57 ` Fiona Klute via buildroot
2026-06-26 7:25 ` Thomas Perale via buildroot
2026-06-24 14:06 ` Thomas Perale via buildroot [this message]
2026-06-24 14:06 ` [Buildroot] [RFC PATCH 10/14] package/libuci: add vulnerability details Thomas Perale via buildroot
2026-06-24 14:06 ` [Buildroot] [RFC PATCH 11/14] package/glibc: " Thomas Perale via buildroot
2026-06-24 14:45 ` Romain Naour via buildroot
2026-06-24 15:06 ` Thomas Perale via buildroot
2026-06-24 14:06 ` [Buildroot] [RFC PATCH 12/14] package/freeradius-server: add vulnerabilities details Thomas Perale via buildroot
2026-06-24 14:06 ` [Buildroot] [RFC PATCH 13/14] package/flex: add vulnerability details Thomas Perale via buildroot
2026-06-24 14:06 ` [Buildroot] [RFC PATCH 14/14] package/clamav: " Thomas Perale via buildroot
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260624140645.185318-10-thomas.perale@mind.be \
--to=buildroot@buildroot.org \
--cc=ricardo.martincoski@datacom.com.br \
--cc=thomas.perale@mind.be \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox