From: Peter Marko Date: Mon, 18 Aug 2025 18:10:48 +0000 (+0200) Subject: glib-2.0: ignore CVE-2025-4056 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=5858567a9222d9fff6f0a282cf7c7bda4e19af57;p=thirdparty%2Fopenembedded%2Fopenembedded-core-contrib.git glib-2.0: ignore CVE-2025-4056 NVD report [1] says: A flaw was found in GLib. A denial of service on **Windows platforms** may occur if an application attempts to spawn a program using long command lines. The fix [3] (linked from [2]) also changes only files glib/gspawn-win32-helper.c glib/gspawn-win32.c [1] https://nvd.nist.gov/vuln/detail/CVE-2025-4056 [2] https://gitlab.gnome.org/GNOME/glib/-/issues/3668 [3] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4570 Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman --- diff --git a/meta/recipes-core/glib-2.0/glib-2.0_2.78.6.bb b/meta/recipes-core/glib-2.0/glib-2.0_2.78.6.bb index e1a3b57270..53e0543045 100644 --- a/meta/recipes-core/glib-2.0/glib-2.0_2.78.6.bb +++ b/meta/recipes-core/glib-2.0/glib-2.0_2.78.6.bb @@ -66,3 +66,5 @@ def find_meson_cross_files(d): python () { find_meson_cross_files(d) } + +CVE_STATUS[CVE-2025-4056] = "not-applicable-platform: Issue only applies on Windows"