openRuyi-tutorials/buildroot
6
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

package/mupdf: remove stale IGNORE_CVES

Browse Source 
The fixes for the CVE-2024-24258 & CVE-2024-24259 were introduced in [1]
and targeted the package libfreeglut.

The patches that fixed CVE-2024-24258 & CVE-2024-24259 in libfreeglut
were removed in Buildroot commit [2]. With this bump the IGNORE_CVES
entries for mupdf were not removed.

[1] 0f4fef076f package/libfreeglut: add upstream security fix for CVE-2024-2425{8, 9}
[2] b1c77090ef package/libfreeglut: bump version to 3.6.0

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
This commit is contained in:
Thomas Perale
2025-12-28 19:56:28 +01:00
committed by Thomas Petazzoni
parent 1b656345ec
commit f2e442a14d
1 changed files with 0 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
package/mupdf/mupdf.mk
View File

@@ -21,12 +21,6 @@ MUPDF_DEPENDENCIES = \
lcms2 openjpeg \
zlib
# libfreeglut/0001-Plug-memory-leak-that-happens-upon-error.patch
# Fix is in libfreeglut, but CVE applied to mupdf.
MUPDF_IGNORE_CVES = \
CVE-2024-24258 \
CVE-2024-24259
# mupdf doesn't use CFLAGS and LIBS but XCFLAGS and XLIBS instead.
# with USE_SYSTEM_LIBS it will try to use system libraries instead of the bundled ones.
MUPDF_MAKE_ENV = $(TARGET_MAKE_ENV) $(TARGET_CONFIGURE_OPTS) \