Browse Source

boot/grub2: ignore CVE-2021-46705

This CVE is specific to the SUSE distribution. See
https://security-tracker.debian.org/tracker/CVE-2021-46705.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 259314f016b0cd7cabfdcce88a5c11f1da5edd05)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Thomas Petazzoni 2 years ago
parent
commit
e8cccbb50c
1 changed files with 2 additions and 0 deletions
  1. 2 0
      boot/grub2/grub2.mk

+ 2 - 0
boot/grub2/grub2.mk

@@ -49,6 +49,8 @@ GRUB2_IGNORE_CVES += CVE-2019-14865
 # grub_linuxefi_secure_validate() is not implemented in the grub2
 # version available in Buildroot.
 GRUB2_IGNORE_CVES += CVE-2020-15705
+# vulnerability is specific to the SUSE distribution
+GRUB2_IGNORE_CVES += CVE-2021-46705
 
 ifeq ($(BR2_TARGET_GRUB2_INSTALL_TOOLS),y)
 GRUB2_INSTALL_TARGET = YES