From 0980919b90d0f878c89166fdfd98c86eea587016 Mon Sep 17 00:00:00 2001 From: Thomas Petazzoni Date: Tue, 31 Dec 2024 11:35:17 +0100 Subject: [PATCH] package/qt6/qt6base: fix QT6BASE_IGNORE_CVES for CVE-2023-51714 Commit 4009842cba631b1061bcdea799e0802c40ea549c ("package/qt6/qt6base: backport fix for CVE-2023-51714") brought in a fix for CVE-2023-51714, but got the QT6BASE_IGNORE_CVES update wrong, due to a copy/paste error with the previous QT6BASE_IGNORE_CVES entry. Due to this CVE-2023-51714 is still reported as affecting qt6base, while the security fix is already there. Fixes: 4009842cba631b1061bcdea799e0802c40ea549c ("package/qt6/qt6base: backport fix for CVE-2023-51714") Signed-off-by: Thomas Petazzoni Signed-off-by: Peter Korsgaard --- package/qt6/qt6base/qt6base.mk | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package/qt6/qt6base/qt6base.mk b/package/qt6/qt6base/qt6base.mk index 3c5747db36..ab6764cbbe 100644 --- a/package/qt6/qt6base/qt6base.mk +++ b/package/qt6/qt6base/qt6base.mk @@ -18,7 +18,7 @@ QT6BASE_IGNORE_CVES += CVE-2023-32763 # 0009-QXmlStreamReader-Raise-error-on-unexpected-tokens.patch QT6BASE_IGNORE_CVES += CVE-2023-38197 # 0011-HPack-fix-incorrect-integer-overflow-check.patch -QT6BASE_IGNORE_CVES += CVE-2023-38197 +QT6BASE_IGNORE_CVES += CVE-2023-51714 # 0013-QXmlStreamReader-make-fastScanName-indicate-parsing-.patch QT6BASE_IGNORE_CVES += CVE-2023-37369 # 0014-Schannel-Reject-certificate-not-signed-by-a-configur.patch