From 014174f00d358d38ddbb68d11a40a4d446b7e5cd Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Sun, 3 Aug 2025 15:38:46 +0200 Subject: [PATCH] package/sqlite: ignore CVE-2025-3277 The CVE-2025-3277 as been marked as a duplicate of CVE-2025-29087 by the debian security tracker [1]. The CVE-2025-29087 has already been fixed in commit [2] so this patch adds CVE-2025-3277 to the ignored CVEs. [1] https://security-tracker.debian.org/tracker/CVE-2025-3277 [2] 835b5659ea package/sqlite: add patch to fix CVE-2025-29087 Signed-off-by: Thomas Perale Signed-off-by: Julien Olivain --- package/sqlite/sqlite.mk | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package/sqlite/sqlite.mk b/package/sqlite/sqlite.mk index 037b89918a..4f4bc9d3af 100644 --- a/package/sqlite/sqlite.mk +++ b/package/sqlite/sqlite.mk @@ -14,7 +14,7 @@ SQLITE_CPE_ID_VENDOR = sqlite SQLITE_INSTALL_STAGING = YES # 0002-Add-a-typecast-to-avoid-32-bit-integer-overflow-in-t.patch -SQLITE_IGNORE_CVES = CVE-2025-29087 +SQLITE_IGNORE_CVES = CVE-2025-29087 CVE-2025-3277 ifeq ($(BR2_PACKAGE_SQLITE_STAT4),y) SQLITE_CFLAGS += -DSQLITE_ENABLE_STAT4