From cbe1b46155b637d695dad1ce060638f23e5f183d Mon Sep 17 00:00:00 2001 From: Matthew Weber Date: Mon, 18 Oct 2021 16:40:14 -0500 Subject: [PATCH] package/lightning: don't ignore unrelated CVE-2020-7747 A new CPE ID was assigned by NIST and this whitelist can be dropped as the package is setup to use the correct CPE (Not to be confused with the other lightning-* packages which show up when a free txt search is used to find the CVE.) This reverts commit 613953f8217bf5b27489e0a939147ef7c74c3f7a. Cc: Paul Cercueil Cc: Yann E. MORIN Signed-off-by: Matthew Weber Signed-off-by: Yann E. MORIN --- package/lightning/lightning.mk | 4 ---- 1 file changed, 4 deletions(-) diff --git a/package/lightning/lightning.mk b/package/lightning/lightning.mk index c0036e5cd1..da8c07e61f 100644 --- a/package/lightning/lightning.mk +++ b/package/lightning/lightning.mk @@ -13,10 +13,6 @@ LIGHTNING_CPE_ID_VENDOR = gnu # We're patching include/Makefile.am LIGHTNING_AUTORECONF = YES -# CVE-2020-7747 is for the Javascript lightning-server project, and not for -# GNU Lightning. -LIGHTNING_IGNORE_CVES = CVE-2020-7747 - ifeq ($(BR2_PACKAGE_LIGHTNING_DISASSEMBLER),y) LIGHTNING_DEPENDENCIES += binutils zlib LIGHTNING_CONF_OPTS += --enable-disassembler