3c88e7efaa
Since Buildroot commit [1] the CVEs are no longer matched to CPEs with versions using '-'. The IGNORE_CVES entries introduced in [2][3][4] are then no longer matched to the grub2 package. For more information, see the explanation in commit [1]. [1]35f376d88esupport/scripts/cve.py: fix CPE matching [2]2495630383boot/grub2: ignore CVE-2024-1048 [3]e2f46ed03dboot/grub2: ignore CVE-2023-4001 [4]a490687571boot/grub2: ignore the last 3 remaining CVEs Signed-off-by: Thomas Perale <thomas.perale@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 2a2184f317faa41049cba4095fde42e87628091e) Signed-off-by: Thomas Perale <thomas.perale@mind.be>