diff options
| author | Poonam Jadhav <poonam.jadhav@kpit.com> | 2025-03-04 17:38:52 +0530 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2025-03-08 06:22:56 -0800 |
| commit | 84089ba7a86ded2766611421185c661f935aa7fc (patch) | |
| tree | 78e317e01d6319677edcee0ac8e8d653c13a500e | |
| parent | d20a52f2fc36ce154d8830630c37746562d22fc1 (diff) | |
| download | poky-84089ba7a86ded2766611421185c661f935aa7fc.tar.gz | |
curl: ignore CVE-2025-0725
CVE-2025-0725 can only trigger for curl when using a runtime
zlib version 1.2.0.3 or older and scarthgap supports
zlib 1.3.1 version, hence ignore cve for scarthgap
https://curl.se/docs/CVE-2025-0725.html
(From OE-Core rev: 8c3b4a604b40260e7ca9575715dd8017e17d35c0)
Signed-off-by: Poonam Jadhav <poonam.jadhav@kpit.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
| -rw-r--r-- | meta/recipes-support/curl/curl_8.7.1.bb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/meta/recipes-support/curl/curl_8.7.1.bb b/meta/recipes-support/curl/curl_8.7.1.bb index 439fcb7881..ddd591dd96 100644 --- a/meta/recipes-support/curl/curl_8.7.1.bb +++ b/meta/recipes-support/curl/curl_8.7.1.bb | |||
| @@ -27,6 +27,8 @@ SRC_URI[sha256sum] = "6fea2aac6a4610fbd0400afb0bcddbe7258a64c63f1f68e5855ebc0c65 | |||
| 27 | CVE_PRODUCT = "haxx:curl haxx:libcurl curl:curl curl:libcurl libcurl:libcurl daniel_stenberg:curl" | 27 | CVE_PRODUCT = "haxx:curl haxx:libcurl curl:curl curl:libcurl libcurl:libcurl daniel_stenberg:curl" |
| 28 | CVE_STATUS[CVE-2024-32928] = "ignored: CURLOPT_SSL_VERIFYPEER was disabled on google cloud services causing a potential man in the middle attack" | 28 | CVE_STATUS[CVE-2024-32928] = "ignored: CURLOPT_SSL_VERIFYPEER was disabled on google cloud services causing a potential man in the middle attack" |
| 29 | 29 | ||
| 30 | CVE_STATUS[CVE-2025-0725] = "not-applicable-config: gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, using zlib 1.2.0.3 or older" | ||
| 31 | |||
| 30 | inherit autotools pkgconfig binconfig multilib_header ptest | 32 | inherit autotools pkgconfig binconfig multilib_header ptest |
| 31 | 33 | ||
| 32 | # Entropy source for random PACKAGECONFIG option | 34 | # Entropy source for random PACKAGECONFIG option |