diff options
| author | Peter Marko <peter.marko@siemens.com> | 2025-05-20 22:20:28 +0200 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2025-06-02 10:26:30 -0700 |
| commit | 577bbcd237a9095fce8fe9a921626dddf5b3b86c (patch) | |
| tree | 352a20d06647d99652e9e190b386a66a004fb101 | |
| parent | 11c14e791bb540c8cb9c0943dd63420fa03277da (diff) | |
| download | poky-577bbcd237a9095fce8fe9a921626dddf5b3b86c.tar.gz | |
sqlite3: mark CVE-2025-29087 as patched
Description of CVE-2025-29087 and CVE-2025-3277 are very similar.
There is no lonk from NVD, but [1] and [2] from Debian mark these two
CVEs as duplicates with the same link for patch.
[1] https://security-tracker.debian.org/tracker/CVE-2025-29087
[2] https://security-tracker.debian.org/tracker/CVE-2025-3277
(From OE-Core rev: a9386d9f3f4f5256dca2eee6355e3cc74d77af1d)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
| -rw-r--r-- | meta/recipes-support/sqlite/sqlite3/CVE-2025-3277.patch | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta/recipes-support/sqlite/sqlite3/CVE-2025-3277.patch b/meta/recipes-support/sqlite/sqlite3/CVE-2025-3277.patch index 8264d4443a..60da0b773d 100644 --- a/meta/recipes-support/sqlite/sqlite3/CVE-2025-3277.patch +++ b/meta/recipes-support/sqlite/sqlite3/CVE-2025-3277.patch | |||
| @@ -7,6 +7,7 @@ Subject: [PATCH] Add a typecast to avoid 32-bit integer overflow in the | |||
| 7 | FossilOrigin-Name: 498e3f1cf57f164fbd8380e92bf91b9f26d6aa05d092fcd135d754abf1e5b1b5 | 7 | FossilOrigin-Name: 498e3f1cf57f164fbd8380e92bf91b9f26d6aa05d092fcd135d754abf1e5b1b5 |
| 8 | 8 | ||
| 9 | CVE: CVE-2025-3277 | 9 | CVE: CVE-2025-3277 |
| 10 | CVE: CVE-2025-29087 | ||
| 10 | Upstream-Status: Backport [https://sqlite.org/src/info/498e3f1cf57f164f] | 11 | Upstream-Status: Backport [https://sqlite.org/src/info/498e3f1cf57f164f] |
| 11 | Signed-off-by: Peter Marko <peter.marko@siemens.com> | 12 | Signed-off-by: Peter Marko <peter.marko@siemens.com> |
| 12 | --- | 13 | --- |