diff options
| author | Peter Marko <peter.marko@siemens.com> | 2025-09-25 16:05:06 +0200 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2025-09-25 12:25:51 -0700 |
| commit | 58836a4e5d2beb25d95c90cecbb18e3be2bdab13 (patch) | |
| tree | d21077e2b3208792108d458ff22c0248201c2849 /meta/recipes-multimedia/gstreamer/gstreamer1.0_1.24.13.bb | |
| parent | 72d9e1b8f469e3312995c318cb6964a6a141b4e1 (diff) | |
| download | poky-58836a4e5d2beb25d95c90cecbb18e3be2bdab13.tar.gz | |
gstreamer1.0: ignore CVE-2025-2759
Copy statement from [1] that it is problem of installers (non-Linux).
Also [2] linked in NVD says "Fixed in 1.25.1 Gstreamer Installer".
Since Yocto builds from sources into our own packages, ignore it.
[1] https://security-tracker.debian.org/tracker/CVE-2025-2759
[2] https://www.zerodayinitiative.com/advisories/ZDI-25-268/
(From OE-Core rev: 99ee1df6bde2ffd4fa2ddea44c0a9b94d9d77bae)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Diffstat (limited to 'meta/recipes-multimedia/gstreamer/gstreamer1.0_1.24.13.bb')
| -rw-r--r-- | meta/recipes-multimedia/gstreamer/gstreamer1.0_1.24.13.bb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.24.13.bb b/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.24.13.bb index db662dfec1..71a360ae7b 100644 --- a/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.24.13.bb +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.24.13.bb | |||
| @@ -75,4 +75,6 @@ CVE_STATUS_GROUPS += "CVE_STATUS_STABLE_BACKPORT" | |||
| 75 | CVE_STATUS_STABLE_BACKPORT = "CVE-2025-47183 CVE-2025-47219 CVE-2025-47806 CVE-2025-47807 CVE-2025-47808" | 75 | CVE_STATUS_STABLE_BACKPORT = "CVE-2025-47183 CVE-2025-47219 CVE-2025-47806 CVE-2025-47807 CVE-2025-47808" |
| 76 | CVE_STATUS_STABLE_BACKPORT[status] = "cpe-stable-backport: these CVEs are patched in current version" | 76 | CVE_STATUS_STABLE_BACKPORT[status] = "cpe-stable-backport: these CVEs are patched in current version" |
| 77 | 77 | ||
| 78 | CVE_STATUS[CVE-2025-2759] = "not-applicable-platform: affects installation packages for non Linux OSes" | ||
| 79 | |||
| 78 | PTEST_BUILD_HOST_FILES = "" | 80 | PTEST_BUILD_HOST_FILES = "" |