* [Buildroot] [PATCH] package/bind: drop CVE-2017-3139 from IGNORE_CVES
@ 2023-09-20 4:26 Daniel Lang
2023-09-25 6:40 ` Peter Korsgaard
0 siblings, 1 reply; 2+ messages in thread
From: Daniel Lang @ 2023-09-20 4:26 UTC (permalink / raw)
To: buildroot
As of 2021-05-14 CVE-2017-3139 is no longer listed as affecting bind, only RHEL.
---
package/bind/bind.mk | 2 --
1 file changed, 2 deletions(-)
diff --git a/package/bind/bind.mk b/package/bind/bind.mk
index b934ab3190..618b5b9278 100644
--- a/package/bind/bind.mk
+++ b/package/bind/bind.mk
@@ -14,8 +14,6 @@ BIND_LICENSE = MPL-2.0
BIND_LICENSE_FILES = COPYRIGHT
BIND_CPE_ID_VENDOR = isc
BIND_SELINUX_MODULES = bind
-# Only applies to RHEL6.x with DNSSEC validation on
-BIND_IGNORE_CVES = CVE-2017-3139
# Library CVE and not used by bind but used by ISC DHCP
BIND_IGNORE_CVES += CVE-2019-6470
BIND_TARGET_SERVER_SBIN = arpaname ddns-confgen dnssec-checkds dnssec-coverage
--
2.42.0
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 2+ messages in thread
end of thread, other threads:[~2023-09-25 6:40 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2023-09-20 4:26 [Buildroot] [PATCH] package/bind: drop CVE-2017-3139 from IGNORE_CVES Daniel Lang
2023-09-25 6:40 ` Peter Korsgaard
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox