a490687571
An analysis of the last 3 remaining CVEs that are reported to affect the grub2 package has allowed to ensure that we can safely ignore them: * CVE-2020-14372 is already fixed by a patch we have in our patch stack for grub2 * CVE-2019-14865 and CVE-2020-15705 are both distro-specific and do not affect grub2 upstream, nor grub2 with the stack of patches we have in Buildroot Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> |
||
|---|---|---|
| .. | ||
| afboot-stm32 | ||
| arm-trusted-firmware | ||
| at91bootstrap | ||
| at91bootstrap3 | ||
| at91dataflashboot | ||
| barebox | ||
| binaries-marvell | ||
| boot-wrapper-aarch64 | ||
| grub2 | ||
| gummiboot | ||
| lpc32xxcdl | ||
| mv-ddr-marvell | ||
| mxs-bootlets | ||
| opensbi | ||
| optee-os | ||
| s500-bootloader | ||
| shim | ||
| syslinux | ||
| uboot | ||
| vexpress-firmware | ||
| common.mk | ||
| Config.in | ||