]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commitdiff
libxslt: mark CVE-2025-7424 as fixed
authorPeter Marko <peter.marko@siemens.com>
Thu, 1 Jan 2026 17:22:35 +0000 (18:22 +0100)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Thu, 8 Jan 2026 11:21:21 +0000 (11:21 +0000)
NVD DB lists this CVE as version-less (common for Redhat CVEs).

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-support/libxslt/libxslt_1.1.45.bb

index c3440a99d47133fdb66b0b067100baa03affcd6c..449ea2dd2456fb3d9947b21ce2a438acb3f9d010 100644 (file)
@@ -19,6 +19,8 @@ SRC_URI[sha256sum] = "9acfe68419c4d06a45c550321b3212762d92f41465062ca4ea19e632ee
 
 UPSTREAM_CHECK_REGEX = "libxslt-(?P<pver>\d+(\.\d+)+)\.tar"
 
+CVE_STATUS[CVE-2025-7424] = "fixed-version: Fixed since version 1.1.44"
+
 S = "${UNPACKDIR}/libxslt-${PV}"
 
 BINCONFIG = "${bindir}/xslt-config"