mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-01 21:23:51 -09:00
Since Buildroot commit [1] the CVEs are no longer matched to CPEs with versions using '-'. The IGNORE_CVES entries introduced in [2][3][4] are then no longer matched to the grub2 package. For more information, see the explanation in commit [1]. [1]35f376d88esupport/scripts/cve.py: fix CPE matching [2]2495630383boot/grub2: ignore CVE-2024-1048 [3]e2f46ed03dboot/grub2: ignore CVE-2023-4001 [4]a490687571boot/grub2: ignore the last 3 remaining CVEs Signed-off-by: Thomas Perale <thomas.perale@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>