Преглед изворни кода

package/ripgrep: drop stale ignore CVE entry

The ignore CVE entry was added because the vulnerability only affects
Windows. But it also only affected ripgrep versions < 13, and we're
using ripgrep 14.x now, so the CVE is anyway no longer relevant, and
the ignore CVE entry can be dropped.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
Thomas Petazzoni пре 2 месеци
родитељ
комит
107e935e1c
1 измењених фајлова са 0 додато и 3 уклоњено
  1. 0 3
      package/ripgrep/ripgrep.mk

+ 0 - 3
package/ripgrep/ripgrep.mk

@@ -10,7 +10,4 @@ RIPGREP_LICENSE = MIT
 RIPGREP_LICENSE_FILES = LICENSE-MIT
 RIPGREP_LICENSE_FILES = LICENSE-MIT
 RIPGREP_CPE_ID_VALID = YES
 RIPGREP_CPE_ID_VALID = YES
 
 
-# CVE only impacts ripgrep on Windows
-RIPGREP_IGNORE_CVES += CVE-2021-3013
-
 $(eval $(cargo-package))
 $(eval $(cargo-package))