From 5858567a9222d9fff6f0a282cf7c7bda4e19af57 Mon Sep 17 00:00:00 2001 From: Peter Marko Date: Mon, 18 Aug 2025 20:10:48 +0200 Subject: [PATCH] glib-2.0: ignore CVE-2025-4056 NVD report [1] says: A flaw was found in GLib. A denial of service on **Windows platforms** may occur if an application attempts to spawn a program using long command lines. The fix [3] (linked from [2]) also changes only files glib/gspawn-win32-helper.c glib/gspawn-win32.c [1] https://nvd.nist.gov/vuln/detail/CVE-2025-4056 [2] https://gitlab.gnome.org/GNOME/glib/-/issues/3668 [3] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4570 Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman --- meta/recipes-core/glib-2.0/glib-2.0_2.78.6.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-core/glib-2.0/glib-2.0_2.78.6.bb b/meta/recipes-core/glib-2.0/glib-2.0_2.78.6.bb index e1a3b57270..53e0543045 100644 --- a/meta/recipes-core/glib-2.0/glib-2.0_2.78.6.bb +++ b/meta/recipes-core/glib-2.0/glib-2.0_2.78.6.bb @@ -66,3 +66,5 @@ def find_meson_cross_files(d): python () { find_meson_cross_files(d) } + +CVE_STATUS[CVE-2025-4056] = "not-applicable-platform: Issue only applies on Windows" -- 2.47.3