Go to file
Thomas Petazzoni 498406cfdb package/qt6base: properly ignore CVE-2023-32573
In commit
a9aa11544a ("package/qt6/qt6svg:
backport fix for CVE-2023-32573"), a fix for security issue
CVE-2023-32573 was added to qt6svg, with the appropriate
QT6SVG_IGNORE_CVES entry.

However, all CVEs against Qt are reported by the NVD on the qt:qt
vendor/product CPE. For example:

  https://nvd.nist.gov/vuln/detail/CVE-2023-32573

Therefore, the QT6SVG_IGNORE_CVES entry added has no effect, and
CVE-2023-32573 continues to be reported against our qt6base package.

The only reasonable option is to collect all such CVE ignore entries
for Qt modules into the qt6base package, which is the one that matches
with the qt:qt CPE identifier. This commit does just that, with an
hopefully appropriate comment in qt6base.mk that explains what's going
on.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-31 17:00:50 +01:00
.github .github: add a pull request warning that explains the mailing list workflow 2024-05-07 18:09:38 +02:00
.gitlab/issue_templates gitlab: fix issue template 2024-09-19 11:11:28 +02:00
arch arch/Config.in.arc: fix indentation 2024-09-19 09:10:58 +02:00
board board/zynqmp/kria/readme.txt: add usb start 2024-12-06 20:49:50 +01:00
boot boot/grub2: update _SITE to use BR2_GNU_MIRROR 2024-12-13 23:39:09 +01:00
configs configs/stm32mp157a_dk1: add hashes 2024-07-31 18:48:06 +02:00
docs docs/website: fix the link to the mailman archives 2024-11-13 09:36:28 +01:00
fs fs/tar: use appropriate TAR 2024-06-15 20:28:56 +02:00
linux {linux, linux-headers}: bump 5.{4, 10, 15}.x / 6.{1, 6, 12}.x series 2024-12-29 20:51:25 +01:00
package package/qt6base: properly ignore CVE-2023-32573 2024-12-31 17:00:50 +01:00
support Update for 2024.02.9 2024-12-08 21:51:20 +01:00
system system: expose BR2_ROOTFS_POST_SCRIPT_ARGS for PRE_BUILD scripts 2024-04-28 14:07:55 +02:00
toolchain toolchain/toolchain-wrapper.c: fix 'potentially' typo 2024-10-12 15:57:13 +02:00
utils utils/genrandconfig: handle BR2_LINUX_KERNEL_IMAGE_TARGET_CUSTOM=y 2024-11-12 22:44:49 +01:00
.b4-config .b4-config: configure b4 for Buildroot 2024-08-20 19:11:53 +02:00
.checkpackageignore package/cdrkit: convert first patch to Git formatted one 2024-12-23 09:25:39 +01:00
.clang-format .clang-format: initial import from Linux 5.15.6 2022-01-01 15:01:13 +01:00
.defconfig
.editorconfig editorconfig: leave patch files alone wrt trainling spaces 2024-06-16 12:24:58 +02:00
.flake8
.gitignore
.gitlab-ci.yml support/misc/gitlab-ci.yml.in: retry a job only if it failed due to a runner issue 2023-08-27 10:09:37 +02:00
.shellcheckrc utils/check-package: improve shellcheck reproducibility 2022-07-25 23:52:47 +02:00
CHANGES Update for 2024.02.9 2024-12-08 21:51:20 +01:00
Config.in Config.in: switch GNU mirrors URL to https 2024-12-14 09:51:29 +01:00
Config.in.legacy toolchain: drop codescape mips toolchains 2024-03-22 20:51:35 +01:00
COPYING
DEVELOPERS DEVELOPERS: drop Yann's entries 2024-12-06 20:51:18 +01:00
Makefile Update for 2024.02.9 2024-12-08 21:51:20 +01:00
Makefile.legacy
README docs: move the IRC channel away from Freenode 2021-05-29 22:16:23 +02:00

Buildroot is a simple, efficient and easy-to-use tool to generate embedded
Linux systems through cross-compilation.

The documentation can be found in docs/manual. You can generate a text
document with 'make manual-text' and read output/docs/manual/manual.text.
Online documentation can be found at http://buildroot.org/docs.html

To build and use the buildroot stuff, do the following:

1) run 'make menuconfig'
2) select the target architecture and the packages you wish to compile
3) run 'make'
4) wait while it compiles
5) find the kernel, bootloader, root filesystem, etc. in output/images

You do not need to be root to build or run buildroot.  Have fun!

Buildroot comes with a basic configuration for a number of boards. Run
'make list-defconfigs' to view the list of provided configurations.

Please feed suggestions, bug reports, insults, and bribes back to the
buildroot mailing list: buildroot@buildroot.org
You can also find us on #buildroot on OFTC IRC.

If you would like to contribute patches, please read
https://buildroot.org/manual.html#submitting-patches