On 12/1/25 16:05, Marko, Peter wrote: > Any idea why this report does not list libde265 (CVE-2024-38949, > CVE-2024-38950) which are present at > https://valkyrie.yocto.io/pub/non-release/patchmetrics-meta-oe/ ?
Apparently the reason is that I didn't have the "commercial" in LICENSE_FLAGS_ACCEPTED, only for kirkstone, grr Thanks for the heads up, I really need to look into a "bitbake real-universe" target or alternative - but until then will pay attention to this. (If anyone wants me to re-run these reports with this config, then let me know.) > > Peter > >> -----Original Message----- >> From: [email protected] <openembedded- >> [email protected]> On Behalf Of Gyorgy Sarvari via >> lists.openembedded.org >> Sent: Monday, December 1, 2025 15:48 >> To: [email protected] >> Subject: [oe] CVE report - master - 2025-12-01 >> >> List of all open CVEs (56, out of which new this week: 0): >> >> - dhrystone: CVE-2020-23026: https://nvd.nist.gov/vuln/detail/CVE-2020-23026 >> - ez-ipupdate: CVE-2003-0887: https://nvd.nist.gov/vuln/detail/CVE-2003-0887 >> - frr: CVE-2025-61099: https://nvd.nist.gov/vuln/detail/CVE-2025-61099 >> - frr: CVE-2025-61100: https://nvd.nist.gov/vuln/detail/CVE-2025-61100 >> - frr: CVE-2025-61101: https://nvd.nist.gov/vuln/detail/CVE-2025-61101 >> - frr: CVE-2025-61102: https://nvd.nist.gov/vuln/detail/CVE-2025-61102 >> - frr: CVE-2025-61103: https://nvd.nist.gov/vuln/detail/CVE-2025-61103 >> - frr: CVE-2025-61104: https://nvd.nist.gov/vuln/detail/CVE-2025-61104 >> - frr: CVE-2025-61105: https://nvd.nist.gov/vuln/detail/CVE-2025-61105 >> - frr: CVE-2025-61106: https://nvd.nist.gov/vuln/detail/CVE-2025-61106 >> - frr: CVE-2025-61107: https://nvd.nist.gov/vuln/detail/CVE-2025-61107 >> - giflib: CVE-2024-45993: https://nvd.nist.gov/vuln/detail/CVE-2024-45993 >> - libuser: CVE-2012-5644: https://nvd.nist.gov/vuln/detail/CVE-2012-5644 >> - minio: CVE-2018-1000538: https://nvd.nist.gov/vuln/detail/CVE-2018-1000538 >> - minio: CVE-2020-11012: https://nvd.nist.gov/vuln/detail/CVE-2020-11012 >> - minio: CVE-2021-21287: https://nvd.nist.gov/vuln/detail/CVE-2021-21287 >> - minio: CVE-2021-21362: https://nvd.nist.gov/vuln/detail/CVE-2021-21362 >> - minio: CVE-2021-21390: https://nvd.nist.gov/vuln/detail/CVE-2021-21390 >> - minio: CVE-2021-43858: https://nvd.nist.gov/vuln/detail/CVE-2021-43858 >> - minio: CVE-2022-35919: https://nvd.nist.gov/vuln/detail/CVE-2022-35919 >> - minio: CVE-2023-28433: https://nvd.nist.gov/vuln/detail/CVE-2023-28433 >> - minio: CVE-2023-28434: https://nvd.nist.gov/vuln/detail/CVE-2023-28434 >> - ndpi: CVE-2025-25066: https://nvd.nist.gov/vuln/detail/CVE-2025-25066 >> - openflow: CVE-2018-1000155: >> https://nvd.nist.gov/vuln/detail/CVE-2018-1000155 >> - openjpeg: CVE-2023-39327: https://nvd.nist.gov/vuln/detail/CVE-2023-39327 >> - openjpeg: CVE-2023-39328: https://nvd.nist.gov/vuln/detail/CVE-2023-39328 >> - openjpeg: CVE-2023-39329: https://nvd.nist.gov/vuln/detail/CVE-2023-39329 >> - sthttpd: CVE-2021-26843: https://nvd.nist.gov/vuln/detail/CVE-2021-26843 >> - tigervnc: CVE-2023-6377: https://nvd.nist.gov/vuln/detail/CVE-2023-6377 >> - tigervnc: CVE-2023-6478: https://nvd.nist.gov/vuln/detail/CVE-2023-6478 >> - tigervnc: CVE-2025-26594: https://nvd.nist.gov/vuln/detail/CVE-2025-26594 >> - tigervnc: CVE-2025-26595: https://nvd.nist.gov/vuln/detail/CVE-2025-26595 >> - tigervnc: CVE-2025-26596: https://nvd.nist.gov/vuln/detail/CVE-2025-26596 >> - tigervnc: CVE-2025-26597: https://nvd.nist.gov/vuln/detail/CVE-2025-26597 >> - tigervnc: CVE-2025-26598: https://nvd.nist.gov/vuln/detail/CVE-2025-26598 >> - tigervnc: CVE-2025-26599: https://nvd.nist.gov/vuln/detail/CVE-2025-26599 >> - tigervnc: CVE-2025-26600: https://nvd.nist.gov/vuln/detail/CVE-2025-26600 >> - tigervnc: CVE-2025-26601: https://nvd.nist.gov/vuln/detail/CVE-2025-26601 >> - webkitgtk3: CVE-2025-43343: >> https://nvd.nist.gov/vuln/detail/CVE-2025-43343 >> - yasm: CVE-2021-33455: https://nvd.nist.gov/vuln/detail/CVE-2021-33455 >> - yasm: CVE-2021-33457: https://nvd.nist.gov/vuln/detail/CVE-2021-33457 >> - yasm: CVE-2021-33458: https://nvd.nist.gov/vuln/detail/CVE-2021-33458 >> - yasm: CVE-2021-33459: https://nvd.nist.gov/vuln/detail/CVE-2021-33459 >> - yasm: CVE-2021-33460: https://nvd.nist.gov/vuln/detail/CVE-2021-33460 >> - yasm: CVE-2021-33461: https://nvd.nist.gov/vuln/detail/CVE-2021-33461 >> - yasm: CVE-2021-33462: https://nvd.nist.gov/vuln/detail/CVE-2021-33462 >> - yasm: CVE-2021-33463: https://nvd.nist.gov/vuln/detail/CVE-2021-33463 >> - yasm: CVE-2021-33465: https://nvd.nist.gov/vuln/detail/CVE-2021-33465 >> - yasm: CVE-2021-33466: https://nvd.nist.gov/vuln/detail/CVE-2021-33466 >> - yasm: CVE-2021-33467: https://nvd.nist.gov/vuln/detail/CVE-2021-33467 >> - yasm: CVE-2021-33468: https://nvd.nist.gov/vuln/detail/CVE-2021-33468 >> - yasm: CVE-2023-30402: https://nvd.nist.gov/vuln/detail/CVE-2023-30402 >> - yasm: CVE-2023-31972: https://nvd.nist.gov/vuln/detail/CVE-2023-31972 >> - yasm: CVE-2023-31973: https://nvd.nist.gov/vuln/detail/CVE-2023-31973 >> - yasm: CVE-2023-31974: https://nvd.nist.gov/vuln/detail/CVE-2023-31974 >> - yasm: CVE-2023-51258: https://nvd.nist.gov/vuln/detail/CVE-2023-51258 >> >> ==================== >> >> Removed this week (20): >> >> - cockpit: CVE-2018-15538: https://nvd.nist.gov/vuln/detail/CVE-2018-15538 >> - cockpit: CVE-2018-15539: https://nvd.nist.gov/vuln/detail/CVE-2018-15539 >> - cockpit: CVE-2018-15540: https://nvd.nist.gov/vuln/detail/CVE-2018-15540 >> - libao: CVE-2017-11548: https://nvd.nist.gov/vuln/detail/CVE-2017-11548 >> - python3-django: CVE-2025-64458: https://nvd.nist.gov/vuln/detail/CVE-2025- >> 64458 >> - python3-django: CVE-2025-64459: https://nvd.nist.gov/vuln/detail/CVE-2025- >> 64459 >> - tigervnc: CVE-2014-8241: https://nvd.nist.gov/vuln/detail/CVE-2014-8241 >> - xrdp: CVE-2022-23468: https://nvd.nist.gov/vuln/detail/CVE-2022-23468 >> - xrdp: CVE-2022-23477: https://nvd.nist.gov/vuln/detail/CVE-2022-23477 >> - xrdp: CVE-2022-23478: https://nvd.nist.gov/vuln/detail/CVE-2022-23478 >> - xrdp: CVE-2022-23479: https://nvd.nist.gov/vuln/detail/CVE-2022-23479 >> - xrdp: CVE-2022-23480: https://nvd.nist.gov/vuln/detail/CVE-2022-23480 >> - xrdp: CVE-2022-23481: https://nvd.nist.gov/vuln/detail/CVE-2022-23481 >> - xrdp: CVE-2022-23482: https://nvd.nist.gov/vuln/detail/CVE-2022-23482 >> - xrdp: CVE-2022-23483: https://nvd.nist.gov/vuln/detail/CVE-2022-23483 >> - xrdp: CVE-2022-23484: https://nvd.nist.gov/vuln/detail/CVE-2022-23484 >> - xrdp: CVE-2022-23493: https://nvd.nist.gov/vuln/detail/CVE-2022-23493 >> - xrdp: CVE-2023-40184: https://nvd.nist.gov/vuln/detail/CVE-2023-40184 >> - xrdp: CVE-2023-42822: https://nvd.nist.gov/vuln/detail/CVE-2023-42822 >> - xrdp: CVE-2024-39917: https://nvd.nist.gov/vuln/detail/CVE-2024-39917
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#122216): https://lists.openembedded.org/g/openembedded-devel/message/122216 Mute This Topic: https://lists.openembedded.org/mt/116557675/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
