package/ipsec-tools: annotate _IGNORE_CVES for the included security patches

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
Peter Korsgaard 2020-02-19 17:02:02 +01:00
parent ca9700cd62
commit dde8aa05b9

View File

@ -15,6 +15,11 @@ IPSEC_TOOLS_DEPENDENCIES = openssl flex host-pkgconf host-flex host-bison
# we patch configure.ac # we patch configure.ac
IPSEC_TOOLS_AUTORECONF = YES IPSEC_TOOLS_AUTORECONF = YES
# 0004-CVE-2015-4047.patch
IPSEC_TOOLS_IGNORE_CVES += CVE-2015-4047
# 0005-CVE-2016-10396.patch
IPSEC_TOOLS_IGNORE_CVES += CVE-2016-10396
# configure hardcodes -Werror, so override CFLAGS on make invocation # configure hardcodes -Werror, so override CFLAGS on make invocation
IPSEC_TOOLS_MAKE_OPTS = CFLAGS='$(TARGET_CFLAGS)' IPSEC_TOOLS_MAKE_OPTS = CFLAGS='$(TARGET_CFLAGS)'