From 1e542ddc9bfa99f5cbbfdc8be9c8e48dc7009b02 Mon Sep 17 00:00:00 2001
From: Christoph Reiter <reiter.christoph@gmail.com>
Date: Sun, 7 Sep 2025 15:28:46 +0200
Subject: [PATCH] p7zip: ignore some old CVEs

they have wrong version infos
---
 p7zip/PKGBUILD | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/p7zip/PKGBUILD b/p7zip/PKGBUILD
index a2df8c73..69ba5d88 100644
--- a/p7zip/PKGBUILD
+++ b/p7zip/PKGBUILD
@@ -8,6 +8,10 @@ url="https://github.com/p7zip-project/p7zip"
 msys2_references=(
   "cpe: cpe:/a:7-zip:p7zip"
 )
+msys2_ignore_vulnerabilities=(
+  "CVE-2018-5996"  # fixed since 17.01
+  "CVE-2017-17969" # fixed since 17.01
+)
 license=('LGPL' 'custom:unRAR')
 arch=('i686' 'x86_64')
 depends=('gcc-libs' 'bash')