From 58836a4e5d2beb25d95c90cecbb18e3be2bdab13 Mon Sep 17 00:00:00 2001 From: Peter Marko Date: Thu, 25 Sep 2025 16:05:06 +0200 Subject: gstreamer1.0: ignore CVE-2025-2759 Copy statement from [1] that it is problem of installers (non-Linux). Also [2] linked in NVD says "Fixed in 1.25.1 Gstreamer Installer". Since Yocto builds from sources into our own packages, ignore it. [1] https://security-tracker.debian.org/tracker/CVE-2025-2759 [2] https://www.zerodayinitiative.com/advisories/ZDI-25-268/ (From OE-Core rev: 99ee1df6bde2ffd4fa2ddea44c0a9b94d9d77bae) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman --- meta/recipes-multimedia/gstreamer/gstreamer1.0_1.24.13.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.24.13.bb b/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.24.13.bb index db662dfec1..71a360ae7b 100644 --- a/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.24.13.bb +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.24.13.bb @@ -75,4 +75,6 @@ CVE_STATUS_GROUPS += "CVE_STATUS_STABLE_BACKPORT" CVE_STATUS_STABLE_BACKPORT = "CVE-2025-47183 CVE-2025-47219 CVE-2025-47806 CVE-2025-47807 CVE-2025-47808" CVE_STATUS_STABLE_BACKPORT[status] = "cpe-stable-backport: these CVEs are patched in current version" +CVE_STATUS[CVE-2025-2759] = "not-applicable-platform: affects installation packages for non Linux OSes" + PTEST_BUILD_HOST_FILES = "" -- cgit v1.2.3-54-g00ecf