From 16858730757977f208657a5cc0f090ea99939911 Mon Sep 17 00:00:00 2001 From: Peter Marko Date: Sat, 23 Aug 2025 22:52:35 +0200 Subject: gnutls: mark CVE-2025-32989 and CVE-2025-32990 as fixed This is mentioned in [1]. NVD tracks this as version-less CVE. [1] https://gitlab.com/gnutls/gnutls/-/blob/3.8.10/NEWS?ref_type=tags#L8 (From OE-Core rev: 0c84e464d67df1111e62edc5d4f9ad398e19e40a) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman --- meta/recipes-support/gnutls/gnutls_3.8.10.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/recipes-support/gnutls/gnutls_3.8.10.bb b/meta/recipes-support/gnutls/gnutls_3.8.10.bb index 600f23683e..2ef71a1213 100644 --- a/meta/recipes-support/gnutls/gnutls_3.8.10.bb +++ b/meta/recipes-support/gnutls/gnutls_3.8.10.bb @@ -98,3 +98,6 @@ pkg_postinst_ontarget:${PN}-fips () { ${bindir}/fipshmac ${libdir}/libhogweed.so.6.* > ${libdir}/.libhogweed.so.6.hmac fi } + +CVE_STATUS[CVE-2025-32989] = "fixed-version: fixed in version 3.8.10" +CVE_STATUS[CVE-2025-32990] = "fixed-version: fixed in version 3.8.10" -- cgit v1.2.3-54-g00ecf