]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commitdiff
ghostscript: remove CVE_CHECK_IGNORE for CVE-2013-6629
authorRoss Burton <ross.burton@arm.com>
Fri, 23 Jun 2023 12:32:48 +0000 (13:32 +0100)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Thu, 29 Jun 2023 09:59:50 +0000 (10:59 +0100)
This CVE now has a version range, indicating that this Ghostscript
release isn't vulnerable.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-extended/ghostscript/ghostscript_10.01.1.bb

index f03ebf447892b6d83c7e3ca790c7a85636c8289e..0d41242bc2ccaee9df6fa11dc73993b5ad9e598d 100644 (file)
@@ -18,9 +18,6 @@ DEPENDS = "tiff jpeg fontconfig cups libpng freetype zlib"
 UPSTREAM_CHECK_URI = "https://github.com/ArtifexSoftware/ghostpdl-downloads/releases"
 UPSTREAM_CHECK_REGEX = "(?P<pver>\d+(\.\d+)+)\.tar"
 
-# We use a system libjpeg-turbo which has this fix
-CVE_CHECK_IGNORE += "CVE-2013-6629"
-
 def gs_verdir(v):
     return "".join(v.split("."))