GNU bug report logs - #31437
[PATCH 0/2] opencv: Ignore CVEs. Document lint-hidden-cve

Previous Next

Full log

Message #11 received at 31437 <at> debbugs.gnu.org (full text, mbox):

From: Björn Höfling <bjoern.hoefling <at> bjoernhoefling.de>
To: 31437 <at> debbugs.gnu.org
Subject: [PATCH 2/2] gnu: opencv: Ignore CVEs.
Date: Sun, 13 May 2018 01:40:30 +0200

[Message part 1 (text/plain, inline)]

* gnu/packages/image-processing.scm (opencv)[properties]:  Add a
lint-hidden-cve property and add three CVEs to be ignored.
---
 gnu/packages/image-processing.scm | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/gnu/packages/image-processing.scm
b/gnu/packages/image-processing.scm index ef303e134..4842ad450 100644
--- a/gnu/packages/image-processing.scm
+++ b/gnu/packages/image-processing.scm
@@ -222,6 +222,11 @@ integrates with various databases on GUI toolkits
such as Qt and Tk.") (for-each delete-file
                             '("modules/java/test/pure_test/lib/junit-4.11.jar"
                               "samples/java/sbt/sbt/sbt-launch.jar"))))))
+    ;; These three CVEs are not a problem of OpenCV, see:
+    ;; https://github.com/opencv/opencv/issues/10998
+    (properties '((lint-hidden-cve . ("CVE-2018-7712"
+                                      "CVE-2018-7713"
+                                      "CVE-2018-7714"))))
     (build-system cmake-build-system)
     (arguments
      `(#:configure-flags
-- 
2.17.0

[Message part 2 (application/pgp-signature, inline)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.