From e8cccbb50ce5a754f81c2abc64da331577cfce7e Mon Sep 17 00:00:00 2001 From: Thomas Petazzoni Date: Tue, 20 Sep 2022 23:29:20 +0200 Subject: [PATCH] boot/grub2: ignore CVE-2021-46705 This CVE is specific to the SUSE distribution. See https://security-tracker.debian.org/tracker/CVE-2021-46705. Signed-off-by: Thomas Petazzoni (cherry picked from commit 259314f016b0cd7cabfdcce88a5c11f1da5edd05) Signed-off-by: Peter Korsgaard --- boot/grub2/grub2.mk | 2 ++ 1 file changed, 2 insertions(+) diff --git a/boot/grub2/grub2.mk b/boot/grub2/grub2.mk index d93e383422..59cc1c2353 100644 --- a/boot/grub2/grub2.mk +++ b/boot/grub2/grub2.mk @@ -49,6 +49,8 @@ GRUB2_IGNORE_CVES += CVE-2019-14865 # grub_linuxefi_secure_validate() is not implemented in the grub2 # version available in Buildroot. GRUB2_IGNORE_CVES += CVE-2020-15705 +# vulnerability is specific to the SUSE distribution +GRUB2_IGNORE_CVES += CVE-2021-46705 ifeq ($(BR2_TARGET_GRUB2_INSTALL_TOOLS),y) GRUB2_INSTALL_TARGET = YES