Selaa lähdekoodia

package/lightning: ignore not applicable CVE-2020-7747

CVE-2020-7747 applies to the Javascript lightning-server project, and
not to the GNU Lightning project:

    https://nvd.nist.gov/vuln/detail/CVE-2020-7747

Signed-off-by: Paul Cercueil <paul@crapouillou.net>
[yann.morin.1998@free.fr: reword commit log; add URL]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Paul Cercueil 3 vuotta sitten
vanhempi
commit
613953f821
1 muutettua tiedostoa jossa 4 lisäystä ja 0 poistoa
  1. 4 0
      package/lightning/lightning.mk

+ 4 - 0
package/lightning/lightning.mk

@@ -12,6 +12,10 @@ LIGHTNING_INSTALL_STAGING = YES
 # We're patching include/Makefile.am
 LIGHTNING_AUTORECONF = YES
 
+# CVE-2020-7747 is for the Javascript lightning-server project, and not for
+# GNU Lightning.
+LIGHTNING_IGNORE_CVES = CVE-2020-7747
+
 ifeq ($(BR2_PACKAGE_LIGHTNING_DISASSEMBLER),y)
 LIGHTNING_DEPENDENCIES += binutils zlib
 LIGHTNING_CONF_OPTS += --enable-disassembler