Browse Source

package/lightning: don't ignore unrelated CVE-2020-7747

A new CPE ID was assigned by NIST and this whitelist can be
dropped as the package is setup to use the correct CPE (Not
to be confused with the other lightning-* packages which show
up when a free txt search is used to find the CVE.)

This reverts commit 613953f8217bf5b27489e0a939147ef7c74c3f7a.

Cc: Paul Cercueil <paul@crapouillou.net>
Cc: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Matthew Weber <matthew.weber@collins.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Matthew Weber 3 years ago
parent
commit
cbe1b46155
1 changed files with 0 additions and 4 deletions
  1. 0 4
      package/lightning/lightning.mk

+ 0 - 4
package/lightning/lightning.mk

@@ -13,10 +13,6 @@ LIGHTNING_CPE_ID_VENDOR = gnu
 # We're patching include/Makefile.am
 # We're patching include/Makefile.am
 LIGHTNING_AUTORECONF = YES
 LIGHTNING_AUTORECONF = YES
 
 
-# CVE-2020-7747 is for the Javascript lightning-server project, and not for
-# GNU Lightning.
-LIGHTNING_IGNORE_CVES = CVE-2020-7747
-
 ifeq ($(BR2_PACKAGE_LIGHTNING_DISASSEMBLER),y)
 ifeq ($(BR2_PACKAGE_LIGHTNING_DISASSEMBLER),y)
 LIGHTNING_DEPENDENCIES += binutils zlib
 LIGHTNING_DEPENDENCIES += binutils zlib
 LIGHTNING_CONF_OPTS += --enable-disassembler
 LIGHTNING_CONF_OPTS += --enable-disassembler