| Message ID | 20220731114607.94029-1-bernd.kuhls@t-online.de |
|---|---|
| State | Handled Elsewhere |
| Headers | show |
| Series | [1/1] package/tor: ignore various CVEs | expand |
diff --git a/package/tor/tor.mk b/package/tor/tor.mk index 0e4bb553e2..b69c95e8e6 100644 --- a/package/tor/tor.mk +++ b/package/tor/tor.mk @@ -9,6 +9,10 @@ TOR_SITE = https://dist.torproject.org TOR_LICENSE = BSD-3-Clause TOR_LICENSE_FILES = LICENSE TOR_CPE_ID_VENDOR = torproject +# only Windows affected +TOR_IGNORE_CVES += CVE-2016-9079 +# only Tor Browser is affected, not tor +TOR_IGNORE_CVES += CVE-2017-16541 TOR_SELINUX_MODULES = tor TOR_DEPENDENCIES = libevent openssl zlib
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> --- package/tor/tor.mk | 4 ++++ 1 file changed, 4 insertions(+)