From patchwork Mon Oct 18 21:40:14 2021 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Matthew Weber X-Patchwork-Id: 1542882 Return-Path: X-Original-To: incoming-buildroot@patchwork.ozlabs.org Delivered-To: patchwork-incoming-buildroot@bilbo.ozlabs.org Authentication-Results: ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org (client-ip=140.211.166.136; helo=smtp3.osuosl.org; envelope-from=buildroot-bounces@buildroot.org; receiver=) Received: from smtp3.osuosl.org (smtp3.osuosl.org [140.211.166.136]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by bilbo.ozlabs.org (Postfix) with ESMTPS id 4HY9KH0hN9z9sNH for ; Tue, 19 Oct 2021 08:40:34 +1100 (AEDT) Received: from localhost (localhost [127.0.0.1]) by smtp3.osuosl.org (Postfix) with ESMTP id E78076078F; Mon, 18 Oct 2021 21:40:32 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from smtp3.osuosl.org ([127.0.0.1]) by localhost (smtp3.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hNgxzbH0d4Fp; Mon, 18 Oct 2021 21:40:32 +0000 (UTC) Received: from ash.osuosl.org (ash.osuosl.org [140.211.166.34]) by smtp3.osuosl.org (Postfix) with ESMTP id 4CF4F60787; Mon, 18 Oct 2021 21:40:31 +0000 (UTC) X-Original-To: buildroot@lists.busybox.net Delivered-To: buildroot@osuosl.org Received: from smtp2.osuosl.org (smtp2.osuosl.org [140.211.166.133]) by ash.osuosl.org (Postfix) with ESMTP id 6C6401BF36A for ; Mon, 18 Oct 2021 21:40:18 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by smtp2.osuosl.org (Postfix) with ESMTP id 5B0F5402AE for ; Mon, 18 Oct 2021 21:40:18 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from smtp2.osuosl.org ([127.0.0.1]) by localhost (smtp2.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 579EzxnLGXXz for ; Mon, 18 Oct 2021 21:40:17 +0000 (UTC) X-Greylist: domain auto-whitelisted by SQLgrey-1.8.0 Received: from da1vs04.rockwellcollins.com (da1vs04.rockwellcollins.com [205.175.227.52]) by smtp2.osuosl.org (Postfix) with ESMTPS id 9B35940154 for ; Mon, 18 Oct 2021 21:40:17 +0000 (UTC) IronPort-SDR: 36saruytCW9VTMmAPnH9KmxfXdvWKjtuPWx9koPf7VZ96JMDQn6Kn/qKOYGhG+ZrgVqTgy0s+K Y2DipMzq2FL6B8CcK/o0/vueSlwV8O+F8cP9qx+Irgug6puWDrRj8RLmzfAqonE82O56Yw1oX7 CaqApSE8TxiiuC/cbVwTFLCByIVZxTaeuP4lm7EuN6cp+Nn5Lr+eVaTfwatdq2V1I5wA6Bjlno jjnUHcZuYsd94ZpquvJdabQrw8tpBnGbymP/6rdV1bpUSR+rxQY8aXoUlQJrMAFCTs9pyG0yws U60= Received: from ofwda1n02.rockwellcollins.com (HELO dtulimr01.rockwellcollins.com) ([205.175.227.14]) by da1vs04.rockwellcollins.com with ESMTP; 18 Oct 2021 16:40:17 -0500 X-Received: from biscuits.rockwellcollins.com (biscuits.rockwellcollins.lab [10.148.119.137]) by dtulimr01.rockwellcollins.com (Postfix) with ESMTP id 5E98360325; Mon, 18 Oct 2021 16:40:16 -0500 (CDT) To: buildroot@buildroot.org Date: Mon, 18 Oct 2021 16:40:14 -0500 Message-Id: <20211018214014.1202-2-matthew.weber@collins.com> X-Mailer: git-send-email 2.17.1 In-Reply-To: <20211018214014.1202-1-matthew.weber@collins.com> References: <20211018214014.1202-1-matthew.weber@collins.com> Subject: [Buildroot] [PATCH 2/2] package/lightning: [revert]ignore not applicable CVE-2020-7747 X-BeenThere: buildroot@buildroot.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion and development of buildroot List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-Patchwork-Original-From: Matthew Weber via buildroot From: Matthew Weber Reply-To: Matthew Weber Cc: Paul Cercueil , Matthew Weber , "Yann E . MORIN" MIME-Version: 1.0 Errors-To: buildroot-bounces@buildroot.org Sender: "buildroot" This reverts commit 613953f8217bf5b27489e0a939147ef7c74c3f7a. A new CPE ID was assigned by NIST and this whitelist can be dropped as the package is setup to use the correct CPE (Not to be confused with the other lightning-* packages which show up when a free txt search is used to find the CVE.) Cc: Paul Cercueil Cc: Yann E. MORIN Signed-off-by: Matthew Weber --- package/lightning/lightning.mk | 4 ---- 1 file changed, 4 deletions(-) diff --git a/package/lightning/lightning.mk b/package/lightning/lightning.mk index c0036e5cd1..da8c07e61f 100644 --- a/package/lightning/lightning.mk +++ b/package/lightning/lightning.mk @@ -13,10 +13,6 @@ LIGHTNING_CPE_ID_VENDOR = gnu # We're patching include/Makefile.am LIGHTNING_AUTORECONF = YES -# CVE-2020-7747 is for the Javascript lightning-server project, and not for -# GNU Lightning. -LIGHTNING_IGNORE_CVES = CVE-2020-7747 - ifeq ($(BR2_PACKAGE_LIGHTNING_DISASSEMBLER),y) LIGHTNING_DEPENDENCIES += binutils zlib LIGHTNING_CONF_OPTS += --enable-disassembler