mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-08-08 08:30:47 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/libinput: ignore CVE-2026-3509{3, 4}

Browse Source 
The vulnerable code was introduced starting version 1.29.901 & 1.30.0
[1] and thus doesn't affect 2025.02.x version 1.27.0.

For more information, see the NVD entry [2].

[1] 9e37bc0cfa
[2] https://nvd.nist.gov/vuln/detail/CVE-2026-35093

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
This commit is contained in:
Thomas Perale
2026-05-12 11:31:15 +02:00
parent 35aaa01cfa
commit 9dace9acd5
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
package/libinput/libinput.mk
View File

@@ -15,6 +15,10 @@ LIBINPUT_CPE_ID_VENDOR = freedesktop
# Tests need fork, so just disable them everywhere.
LIBINPUT_CONF_OPTS = -Dtests=false -Dlibwacom=false -Ddocumentation=false
# Code not present in 1.27.0, see
# https://gitlab.freedesktop.org/libinput/libinput/-/commit/9e37bc0cfa4d975291e5a2899e148fb83526d4a2
LIBINPUT_IGNORE_CVES += CVE-2026-35093 CVE-2026-35094
ifeq ($(BR2_PACKAGE_LIBGTK3),y)
LIBINPUT_CONF_OPTS += -Ddebug-gui=true
LIBINPUT_DEPENDENCIES += libgtk3