From 4aacd22a856d31517dec88f9677693af9e60e030 Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Tue, 30 Dec 2025 09:19:10 +0100 Subject: [PATCH] package/libssh: remove stale IGNORE_CVES The entry was added in commit [1]. But since then the NVD database updated the version end specifier. This IGNORE_CVES entry is then no longer needed. [1] 51b1e1daf5 package/libssh: ignore CVE-2025-5318 Signed-off-by: Thomas Perale Signed-off-by: Thomas Petazzoni --- package/libssh/libssh.mk | 4 ---- 1 file changed, 4 deletions(-) diff --git a/package/libssh/libssh.mk b/package/libssh/libssh.mk index 2be9013454..3c7e77a206 100644 --- a/package/libssh/libssh.mk +++ b/package/libssh/libssh.mk @@ -17,10 +17,6 @@ LIBSSH_CONF_OPTS = \ -DWITH_STACK_PROTECTOR=OFF \ -DWITH_EXAMPLES=OFF -# NVD database is missing an upper version specifier. -# This vulnerability only affects libssh<0.11.2 -LIBSSH_IGNORE_CVES = CVE-2025-5318 - ifeq ($(BR2_ARM_INSTRUCTIONS_THUMB),y) LIBSSH_CONF_OPTS += -DWITH_STACK_CLASH_PROTECTION=OFF endif