677b24ebaf
With the recent addition in pkg-stats to detect stale ignore CVE entries, the CVE-2021-42260 ignore CVE entry is reported as stale. This is because TINYXML_VERSION is 2.6.2_2, and the CVE is annotated as affecting versions up to and including 2.6.2. But in fact, 2.6.2_2 is a special version from the Kodi community, but it's close to the 2.6.2 release, and CVE-2021-42260 is not fixed in it. To get meaningful results, let's tell our CVE checking logic that the tinyxml version is 2.6.2 by setting TINYXML_CPE_ID_VERSION (we're splitting on the _ and keeping the part before). Because we're now setting TINYXML_CPE_ID_VERSION, we must drop TINYXML_CPE_ID_VALID to avoid a check-package warning. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Julien Olivain <ju.o@free.fr>
21 lines
696 B
Makefile
21 lines
696 B
Makefile
################################################################################
|
|
#
|
|
# tinyxml
|
|
#
|
|
################################################################################
|
|
|
|
TINYXML_VERSION = 2.6.2_2
|
|
TINYXML_SITE = http://mirrors.xbmc.org/build-deps/sources
|
|
# AUTORECONF is needed because the XBMC's version of TinyXML contains a
|
|
# configure.ac which is not present in mainline.
|
|
TINYXML_AUTORECONF = YES
|
|
TINYXML_INSTALL_STAGING = YES
|
|
TINYXML_LICENSE = Zlib
|
|
TINYXML_LICENSE_FILES = README
|
|
TINYXML_CPE_ID_VERSION = $(firstword $(subst _,$(space),$(TINYXML_VERSION)))
|
|
|
|
# 0001-In-stamp-always-advance-the-pointer-if-p-0xef.patch
|
|
TINYXML_IGNORE_CVES += CVE-2021-42260
|
|
|
|
$(eval $(autotools-package))
|