From patchwork Sun Nov 22 21:48:52 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Korsgaard X-Patchwork-Id: 1404546 Return-Path: X-Original-To: incoming-buildroot@patchwork.ozlabs.org Delivered-To: patchwork-incoming-buildroot@bilbo.ozlabs.org Authentication-Results: ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=busybox.net (client-ip=140.211.166.136; helo=silver.osuosl.org; envelope-from=buildroot-bounces@busybox.net; receiver=) Authentication-Results: ozlabs.org; dmarc=none (p=none dis=none) header.from=korsgaard.com Authentication-Results: ozlabs.org; dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256 header.s=20161025 header.b=DGFNbIQ7; dkim-atps=neutral Received: from silver.osuosl.org (smtp3.osuosl.org [140.211.166.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 4CfP7R2wZDz9sSf for ; Mon, 23 Nov 2020 08:49:06 +1100 (AEDT) Received: from localhost (localhost [127.0.0.1]) by silver.osuosl.org (Postfix) with ESMTP id 54CFE20000; Sun, 22 Nov 2020 21:49:02 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from silver.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ja9zzKOz-lVq; Sun, 22 Nov 2020 21:48:59 +0000 (UTC) Received: from ash.osuosl.org (ash.osuosl.org [140.211.166.34]) by silver.osuosl.org (Postfix) with ESMTP id 84E3020336; Sun, 22 Nov 2020 21:48:59 +0000 (UTC) X-Original-To: buildroot@lists.busybox.net Delivered-To: buildroot@osuosl.org Received: from whitealder.osuosl.org (smtp1.osuosl.org [140.211.166.138]) by ash.osuosl.org (Postfix) with ESMTP id C15A61BF3E6 for ; Sun, 22 Nov 2020 21:48:57 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by whitealder.osuosl.org (Postfix) with ESMTP id BE1D381FA0 for ; Sun, 22 Nov 2020 21:48:57 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from whitealder.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rJVIMmKu5lv2 for ; Sun, 22 Nov 2020 21:48:57 +0000 (UTC) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6 Received: from mail-ej1-f68.google.com (mail-ej1-f68.google.com [209.85.218.68]) by whitealder.osuosl.org (Postfix) with ESMTPS id D52A781ECF for ; Sun, 22 Nov 2020 21:48:56 +0000 (UTC) Received: by mail-ej1-f68.google.com with SMTP id s25so20605648ejy.6 for ; Sun, 22 Nov 2020 13:48:56 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=sender:from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=ntaBBTpRxZwA7xtp0LkqrRALjqpc9cBaeGF0x4/8nQo=; b=DGFNbIQ7LY6aVZDTZEibarE1MSxLyHS+OtW/JiP5ZK1g5UavWaHkxGSXmy8cMp09j6 O+U+AqkboQy8VfzKokCIoTNUAJeUoY3bVrsFyxhl3KcE0TwRvqxOUp7n8z7LyopRETZ4 3NSdZDm8CK91RCvJeaOQOuUFrguGZ1PsykWLhaiyW5Ofxxlcl/1Rn7MkXrlrA+5yw1k2 8PM/qErHFnKaTlW6WX6QCzg+xHO58r/cx/Xk7yEAVZhG9Lp/2tsxCdbbXe5TSwD++BvY 6DiGE2vEegl1Swl/sxeC1aeZxua+N4pswxd1uliySSyUo9+ik3hi6hQiXK3MEnKHD7ii TpOw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:sender:from:to:cc:subject:date:message-id :mime-version:content-transfer-encoding; bh=ntaBBTpRxZwA7xtp0LkqrRALjqpc9cBaeGF0x4/8nQo=; b=oMwWeI8NnAe68nYOyt/b5tSr+S3AjEsJCO18jubilwE6CL8I4gDvL2aCgfc/PARlid mm6DicqlhxZamehlVdICHt7JXzVbUr2NukscPp+iQlZFhGMNNHY7p13DH6PNrhSic+DQ r6H8TjmM42L32o6DyPNwbiozpcjmoL+qfzHkMU0p3XeMub8BaILxWL//EH5bZWg2uY3U KFQgkLDm222vrviWlZYK31tvQAum1KpydvMbcUAd9feajoUtzYWQ3AlkluQAApi6ZQPX uK6mRIJ/ICC8wPsOCrDYEJ+krg9g3CibT/03zl2pH9UMobO6i/XsCXo4k4NBIkmOg4nW J2yQ== X-Gm-Message-State: AOAM531iFa7SBRCuyD7OgyMpz3fDfKw2nxMW361mxU1wDT8cndWC30pn 0lCD7Lv7koswnKR9Oni2o02s11cz89Y= X-Google-Smtp-Source: ABdhPJx/nAxpsHtA4DqkP9k5mhyyuNgeaCZUVk24I0XvxXw//nJ6qaXIChFdLctQDCR3tHd+oLRUUA== X-Received: by 2002:a17:906:831a:: with SMTP id j26mr42247548ejx.450.1606081734748; Sun, 22 Nov 2020 13:48:54 -0800 (PST) Received: from dell.be.48ers.dk (d51A5BC31.access.telenet.be. [81.165.188.49]) by smtp.gmail.com with ESMTPSA id q15sm3975595edt.95.2020.11.22.13.48.53 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 22 Nov 2020 13:48:53 -0800 (PST) Received: from peko by dell.be.48ers.dk with local (Exim 4.92) (envelope-from ) id 1kgxE5-0007Sr-8Y; Sun, 22 Nov 2020 22:48:53 +0100 From: Peter Korsgaard To: buildroot@buildroot.org Date: Sun, 22 Nov 2020 22:48:52 +0100 Message-Id: <20201122214852.28647-1-peter@korsgaard.com> X-Mailer: git-send-email 2.20.1 MIME-Version: 1.0 Subject: [Buildroot] [PATCH] package/ncurses: mark CVE-2019-1759{4, 5} as fixes by 20191012 patch X-BeenThere: buildroot@busybox.net X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion and development of buildroot List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Peter Korsgaard Errors-To: buildroot-bounces@busybox.net Sender: "buildroot" According to the NVE data, these are fixes in the 20191012 patch - So mark them as such. Signed-off-by: Peter Korsgaard --- package/ncurses/ncurses.mk | 3 +++ 1 file changed, 3 insertions(+) diff --git a/package/ncurses/ncurses.mk b/package/ncurses/ncurses.mk index c11650c766..f4e4784a3c 100644 --- a/package/ncurses/ncurses.mk +++ b/package/ncurses/ncurses.mk @@ -50,6 +50,9 @@ NCURSES_PATCH = \ ncurses-6.1-20200118.patch.gz \ ) +# ncurses-6.1-20191012.patch.gz +NCURSES_IGNORE_CVES += CVE-2019-17594 CVE-2019-17595 + NCURSES_CONF_OPTS = \ --without-cxx \ --without-cxx-binding \