Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/patches/2196615/?format=api
{ "id": 2196615, "url": "http://patchwork.ozlabs.org/api/patches/2196615/?format=api", "web_url": "http://patchwork.ozlabs.org/project/buildroot/patch/20260215144923.54095-1-thomas.perale@mind.be/", "project": { "id": 27, "url": "http://patchwork.ozlabs.org/api/projects/27/?format=api", "name": "Buildroot development", "link_name": "buildroot", "list_id": "buildroot.buildroot.org", "list_email": "buildroot@buildroot.org", "web_url": "", "scm_url": "", "webscm_url": "", "list_archive_url": "", "list_archive_url_format": "", "commit_url_format": "" }, "msgid": "<20260215144923.54095-1-thomas.perale@mind.be>", "list_archive_url": null, "date": "2026-02-15T14:49:22", "name": "[1/2] package/haproxy: ignore CVE-2023-45539", "commit_ref": null, "pull_url": null, "state": "accepted", "archived": false, "hash": "d32c77f736cc5526fbc75bed827f79ad1e8817f7", "submitter": { "id": 87308, "url": "http://patchwork.ozlabs.org/api/people/87308/?format=api", "name": "Thomas Perale", "email": "thomas.perale@mind.be" }, "delegate": { "id": 89618, "url": "http://patchwork.ozlabs.org/api/users/89618/?format=api", "username": "juju", "first_name": "Julien", "last_name": "Olivain", "email": "juju@cotds.org" }, "mbox": "http://patchwork.ozlabs.org/project/buildroot/patch/20260215144923.54095-1-thomas.perale@mind.be/mbox/", "series": [ { "id": 492221, "url": "http://patchwork.ozlabs.org/api/series/492221/?format=api", "web_url": "http://patchwork.ozlabs.org/project/buildroot/list/?series=492221", "date": "2026-02-15T14:49:23", "name": "[1/2] package/haproxy: ignore CVE-2023-45539", "version": 1, "mbox": "http://patchwork.ozlabs.org/series/492221/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/patches/2196615/comments/", "check": "pending", "checks": "http://patchwork.ozlabs.org/api/patches/2196615/checks/", "tags": {}, "related": [], "headers": { "Return-Path": "<buildroot-bounces@buildroot.org>", "X-Original-To": [ "incoming-buildroot@patchwork.ozlabs.org", "buildroot@buildroot.org" ], "Delivered-To": [ "patchwork-incoming-buildroot@legolas.ozlabs.org", "buildroot@buildroot.org" ], "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=h7nJyTnz;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=2605:bc80:3010::138; helo=smtp1.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)" ], "Received": [ "from smtp1.osuosl.org (smtp1.osuosl.org [IPv6:2605:bc80:3010::138])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fDTML34q1z1xxL\n\tfor <incoming-buildroot@patchwork.ozlabs.org>;\n Mon, 16 Feb 2026 01:49:34 +1100 (AEDT)", "from localhost (localhost [127.0.0.1])\n\tby smtp1.osuosl.org (Postfix) with ESMTP id F351D813FC;\n\tSun, 15 Feb 2026 14:49:31 +0000 (UTC)", "from smtp1.osuosl.org ([127.0.0.1])\n by localhost (smtp1.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id rsXeZGunQ82p; Sun, 15 Feb 2026 14:49:30 +0000 (UTC)", "from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp1.osuosl.org (Postfix) with ESMTP id 2D4C0811F6;\n\tSun, 15 Feb 2026 14:49:30 +0000 (UTC)", "from smtp2.osuosl.org (smtp2.osuosl.org [140.211.166.133])\n by lists1.osuosl.org (Postfix) with ESMTP id 1A06035B\n for <buildroot@buildroot.org>; Sun, 15 Feb 2026 14:49:29 +0000 (UTC)", "from localhost (localhost [127.0.0.1])\n by smtp2.osuosl.org (Postfix) with ESMTP id 0A8A5400D3\n for <buildroot@buildroot.org>; Sun, 15 Feb 2026 14:49:29 +0000 (UTC)", "from smtp2.osuosl.org ([127.0.0.1])\n by localhost (smtp2.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id 7aLoHlfVX1RH for <buildroot@buildroot.org>;\n Sun, 15 Feb 2026 14:49:28 +0000 (UTC)", "from mail-wm1-x329.google.com (mail-wm1-x329.google.com\n [IPv6:2a00:1450:4864:20::329])\n by smtp2.osuosl.org (Postfix) with ESMTPS id F3BCE40074\n for <buildroot@buildroot.org>; Sun, 15 Feb 2026 14:49:27 +0000 (UTC)", "by mail-wm1-x329.google.com with SMTP id\n 5b1f17b1804b1-48375f1defeso17234425e9.0\n for <buildroot@buildroot.org>; Sun, 15 Feb 2026 06:49:27 -0800 (PST)", "from arch ([79.132.229.53]) by smtp.gmail.com with ESMTPSA id\n ffacd0b85a97d-43796ac800esm21184682f8f.27.2026.02.15.06.49.23\n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Sun, 15 Feb 2026 06:49:24 -0800 (PST)" ], "X-Virus-Scanned": [ "amavis at osuosl.org", "amavis at osuosl.org" ], "X-Comment": "SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver=<UNKNOWN> ", "DKIM-Filter": [ "OpenDKIM Filter v2.11.0 smtp1.osuosl.org 2D4C0811F6", "OpenDKIM Filter v2.11.0 smtp2.osuosl.org F3BCE40074" ], "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1771166970;\n\tbh=2Hfa6FYVEYa5hLBMl1hTwAXp5fKd4WYDaNl4QEwg0dw=;\n\th=To:Cc:Date:Subject:List-Id:List-Unsubscribe:List-Archive:\n\t List-Post:List-Help:List-Subscribe:From:Reply-To:From;\n\tb=h7nJyTnz+6eI9T6eqW6GLInu/BEM24JplcVIj6eOi/ZkEZPXeh7IkML0RjjK8biLf\n\t +6NG/jUuQePrtyW2pUyA7gaViHHlgruG40xyctiu3aqWpm0jfYZUf7zQCu491S7Gxs\n\t 4RyDSHkp5s+dwfihECryLf+yaFb2CPDaxpLkwJ0HlnJQWJtsof3eoBii7G/pCbTug9\n\t GEevDtAz80xKWlBdun4lGyvexjaF5U5q1X3XYxxrzSj79DgARjrJNtViEq1RX1pt/l\n\t y326JI+CaPaD0VtJuGVWPjJ+tbedvG9GmDoo+AV4FCg+NbgcqZWRZHAUOhTIc2ziCJ\n\t fujwVLMwAc0nw==", "Received-SPF": "Pass (mailfrom) identity=mailfrom;\n client-ip=2a00:1450:4864:20::329; helo=mail-wm1-x329.google.com;\n envelope-from=thomas.perale@essensium.com; receiver=<UNKNOWN>", "DMARC-Filter": "OpenDMARC Filter v1.4.2 smtp2.osuosl.org F3BCE40074", "X-Google-DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20230601; t=1771166965; x=1771771765;\n h=content-transfer-encoding:mime-version:message-id:date:subject:cc\n :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date\n :message-id:reply-to;\n bh=Zp14/QAbR3c60GKFkGG8EMsCYxrhYrO8TaKtzf6ewJE=;\n b=BGBweV+tFBGxfxpNeKJHRBrq0ASmluKm3SMnF10TUFntK+dP3/C8ja4Pvlg3QtoyEe\n TKdY0ApsV6eFkWdiJmOTBc3Qw3vK71GAUejMpWjqJOWKQEQqDs5b5l1TOpJK2xTrFT/K\n fnKedO+CJhShDZqu3h6+m5AO9C5TNGP5T59RoNyBPbIDYuw0qC/SCiGf1FKWYkl6NE0l\n d07mskSb3ExLHY2STaeLXwk6hfw2Z+XYM6+W4a9f62IUnjAk/uWQC5LuU++FgWd1pgEE\n B9PAJTJOqVSZJINsLRDq2OOq6E6z8lv/M5cV23uNTqXQtH+iu6lTD+e2207ajP64LDxM\n jD3Q==", "X-Gm-Message-State": "AOJu0Yy/w+Y3ZUOq2NML6hwAZ9iZ0J2q8A/t2Cc77+MkyQMRauxSaKP4\n xp5PdKF0VsBcRvMlgRSGZroelsFLGfH1YcKN0dpPJ/tKFxL96XnrfAN2R+1qsg7c+OjCXG3iKkg\n BpeSQ", "X-Gm-Gg": "AZuq6aL4IFgHsRHhtR6oSC9pP4qtf+5wrwCCOXpZjjNQDFSNGiXv0JAiZPtVOq1eRhO\n ZLflQQR8171qu2lZJGDdrixIra3lMNhX35dEfSINsFXKEdRzrzv3M9WkErIGdNxvXPiDjGiRTl7\n Crx/trZQ46j4FnNGQ58zoCbGgkqpWfgLEWy5ZfwKaEFQ/8I+ljJUgfYzhfjWsBxBMusYvQKtVwn\n RBT8MnX2eo5h5BCvVmgO3mrCcLR6oRzTTgum4QSXGUh9oXGUMQF3aJ4BLF21eqOQ08L6AL9TMOY\n fyDOMu+hOkUkiP542LzFPNFA3A/pUpPMrLEUpvwJ4l84ugCACfhMZbt7+fK0xeDXqwW72vL4023\n cJ0cy4SeWnOrKY4/u3DnsdZ9/s2O/BA/10wDRiNtllvmeXsjQiu45Zpwca2T5AjJMfZFUt47YDT\n inWVv+Au1s82Bsqbo=", "X-Received": "by 2002:a05:600c:5246:b0:483:71f7:2782 with SMTP id\n 5b1f17b1804b1-48373a14406mr139425175e9.12.1771166964525;\n Sun, 15 Feb 2026 06:49:24 -0800 (PST)", "To": "buildroot@buildroot.org", "Cc": "Fabrice Fontaine <fontaine.fabrice@gmail.com>", "Date": "Sun, 15 Feb 2026 15:49:22 +0100", "Message-ID": "<20260215144923.54095-1-thomas.perale@mind.be>", "X-Mailer": "git-send-email 2.52.0", "MIME-Version": "1.0", "X-Mailman-Original-DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=mind.be; s=google; t=1771166965; x=1771771765; darn=buildroot.org;\n h=content-transfer-encoding:mime-version:message-id:date:subject:cc\n :to:from:from:to:cc:subject:date:message-id:reply-to;\n bh=Zp14/QAbR3c60GKFkGG8EMsCYxrhYrO8TaKtzf6ewJE=;\n b=XqrdOkqs1mcejm0ISFS5Oz4teDx+9oRcaS8ZAfykpwP4OeuW81k+EKyZIy9Nrrjxxl\n eZpBUGysegIc/LTsliQdvRgFpCyWS4bAxsFx7pSLo2/3Lk0sRgzbnJMCxsRuxhLvAKil\n rp0q4TrHuxfkINqZRYKE3qwN22xXK0hi2KDPp72Zhbn9UF/Qx023pDbHSAVFe0eOW88O\n zZzM53rZhfbbpZoRthK2dhj9N5v3l5VczzS98ahDzIKIYignj9h1vMnEvjCuQWKtQxMM\n aZMyFOUAcT/6Gt2nDxhgL5Fb46Ij+tBju6npOmBj8MurEg5pxMiZtbYzh029DGzloO6f\n /D1Q==", "X-Mailman-Original-Authentication-Results": [ "smtp2.osuosl.org;\n dmarc=pass (p=quarantine dis=none)\n header.from=mind.be", "smtp2.osuosl.org;\n dkim=pass (2048-bit key,\n unprotected) header.d=mind.be header.i=@mind.be header.a=rsa-sha256\n header.s=google header.b=XqrdOkqs" ], "Subject": "[Buildroot] [PATCH 1/2] package/haproxy: ignore CVE-2023-45539", "X-BeenThere": "buildroot@buildroot.org", "X-Mailman-Version": "2.1.30", "Precedence": "list", "List-Id": "Discussion and development of buildroot <buildroot.buildroot.org>", "List-Unsubscribe": "<https://lists.buildroot.org/mailman/options/buildroot>,\n <mailto:buildroot-request@buildroot.org?subject=unsubscribe>", "List-Archive": "<http://lists.buildroot.org/pipermail/buildroot/>", "List-Post": "<mailto:buildroot@buildroot.org>", "List-Help": "<mailto:buildroot-request@buildroot.org?subject=help>", "List-Subscribe": "<https://lists.buildroot.org/mailman/listinfo/buildroot>,\n <mailto:buildroot-request@buildroot.org?subject=subscribe>", "From": "Thomas Perale via buildroot <buildroot@buildroot.org>", "Reply-To": "Thomas Perale <thomas.perale@mind.be>", "Content-Type": "text/plain; charset=\"us-ascii\"", "Content-Transfer-Encoding": "7bit", "Errors-To": "buildroot-bounces@buildroot.org", "Sender": "\"buildroot\" <buildroot-bounces@buildroot.org>" }, "content": "The CVE-2023-45539 has incomplete informations (see [1]) and will be\nreported as exploitable by pkg-stats for haproxy v2.6.22.\n\nThe vulnerability has been fixed upstream since version 2.6.15 [2][3].\n\nThis commit mark this vulnerability as ignored.\n\n[1] https://nvd.nist.gov/vuln/detail/CVE-2023-45539\n[2] https://git.haproxy.org/?p=haproxy-2.6.git;a=commit;h=832b672eee54866c7a42a1d46078cc9ae0d544d9\n[3] https://security-tracker.debian.org/tracker/CVE-2023-45539\n\nSigned-off-by: Thomas Perale <thomas.perale@mind.be>\n---\n package/haproxy/haproxy.mk | 4 ++++\n 1 file changed, 4 insertions(+)", "diff": "diff --git a/package/haproxy/haproxy.mk b/package/haproxy/haproxy.mk\nindex 77195d966b..f60cb1e08a 100644\n--- a/package/haproxy/haproxy.mk\n+++ b/package/haproxy/haproxy.mk\n@@ -11,6 +11,10 @@ HAPROXY_LICENSE = GPL-2.0+ and LGPL-2.1+ with exceptions\n HAPROXY_LICENSE_FILES = LICENSE doc/lgpl.txt doc/gpl.txt\n HAPROXY_CPE_ID_VENDOR = haproxy\n \n+# Incomplete NVD annotations, fixed since v2.6.15\n+# https://git.haproxy.org/?p=haproxy-2.6.git;a=commit;h=832b672eee54866c7a42a1d46078cc9ae0d544d9\n+HAPROXY_IGNORE_CVES += CVE-2023-45539\n+\n HAPROXY_MAKE_OPTS = \\\n \tLD=$(TARGET_CC) \\\n \tPREFIX=/usr \\\n", "prefixes": [ "1/2" ] }