[Buildroot] [git commit] package/e2fsprogs: drop CVE-2022-1304

Yann E. MORIN yann.morin.1998 at free.fr
Wed Sep 20 17:35:01 UTC 2023


commit: https://git.buildroot.net/buildroot/commit/?id=dc0c7552735d299107385458c1889c7dc4633864
branch: https://git.buildroot.net/buildroot/commit/?id=refs/heads/master

CVE-2022-1304 only affects e2fsprogs 1.46.5.
The mentioned patch was removed in 6a21733f when bumping to 1.47.0.

Signed-off-by: Daniel Lang <dalang at gmx.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998 at free.fr>
---
 package/e2fsprogs/e2fsprogs.mk | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/package/e2fsprogs/e2fsprogs.mk b/package/e2fsprogs/e2fsprogs.mk
index 80090621bf..7491f4c067 100644
--- a/package/e2fsprogs/e2fsprogs.mk
+++ b/package/e2fsprogs/e2fsprogs.mk
@@ -12,9 +12,6 @@ E2FSPROGS_LICENSE_FILES = NOTICE lib/ss/mit-sipb-copyright.h lib/et/internal.h
 E2FSPROGS_CPE_ID_VENDOR = e2fsprogs_project
 E2FSPROGS_INSTALL_STAGING = YES
 
-# 0001-libext2fs-add-sanity-check-to-extent-manipulation.patch
-E2FSPROGS_IGNORE_CVES += CVE-2022-1304
-
 # Use libblkid and libuuid from util-linux for host and target packages.
 # This prevents overriding them with e2fsprogs' ones, which may cause
 # problems for other packages.



More information about the buildroot mailing list