Skip to contentSkip to conversation

package/libiec61850: ignore CVE-2023-27772

PATCH In review Daniel Lang 2 participants 2 messages Sep 6, 2023 – Sep 14, 2023

lore
Share & tools
lore

Daniel Lang

author
#0 lore raw

PATCH 1/1 package/libiec61850: ignore CVE-2023-27772

Segmentation fault in example code can be exploited. BUILD_EXAMPLES is disabled for all cmake projects.

See https://github.com/mz-automation/libiec61850/issues/442

Signed-off-by Daniel Lang <[email protected]>
---
 package/libiec61850/libiec61850.mk | 3 +++
 1 file changed, 3 insertions(+)
package/libiec61850/libiec61850.mk +3 -0
index 9bd55cb76a..4b61e40c6d 100644
@@ -11,5 +11,8 @@ LIBIEC61850_LICENSE = GPL-3.0+
 LIBIEC61850_LICENSE_FILES = COPYING
 LIBIEC61850_CPE_ID_VENDOR = mz-automation
 LIBIEC61850_CONF_OPTS = -DBUILD_PYTHON_BINDINGS=OFF
+# Examples aren't build
+# https://github.com/mz-automation/libiec61850/issues/442
+LIBIEC61850_IGNORE_CVES += CVE-2023-27772
 
 $(eval $(cmake-package))
Signature · 6 lines
2.42.0

_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot
#1 lore raw
Quoted 8 lines
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line

"Daniel" == Daniel Lang <[email protected]> writes:

Segmentation fault in example code can be exploited. BUILD_EXAMPLES is disabled for all cmake projects.

See https://github.com/mz-automation/libiec61850/issues/442

Signed-off-by Daniel Lang <[email protected]>

Committed to 2023.02.x and 2023.05.x and 2023.08.x, thanks.

Signature · 5 lines
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot