From: Peter Marko <[email protected]> Per their Debian status, they are fixed in tag n9.0.1. All these have git hash as fixed version so it cannot be compared to in Yocto cve-check.
Signed-off-by: Peter Marko <[email protected]> --- meta/recipes-multimedia/ffmpeg/ffmpeg_9.0.2.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/recipes-multimedia/ffmpeg/ffmpeg_9.0.2.bb b/meta/recipes-multimedia/ffmpeg/ffmpeg_9.0.2.bb index bb070d75c5..af92a0b0df 100644 --- a/meta/recipes-multimedia/ffmpeg/ffmpeg_9.0.2.bb +++ b/meta/recipes-multimedia/ffmpeg/ffmpeg_9.0.2.bb @@ -181,3 +181,6 @@ CVE_STATUS[CVE-2025-25469] = "fixed-version: these CVEs are fixed since v8.0" CVE_STATUS[CVE-2025-59729] = "fixed-version: this CVE are fixed since v8.0" CVE_STATUS[CVE-2025-59730] = "fixed-version: this CVE are fixed since v8.0" CVE_STATUS[CVE-2026-58049] = "fixed-version: this CVE are fixed since v9.0" +CVE_STATUS_GROUPS += "CVE_BACKPORTS_v9_0_1" +CVE_BACKPORTS_v9_0_1 = "CVE-2026-75141 CVE-2026-75142 CVE-2026-75143 CVE-2026-75144 CVE-2026-75145 CVE-2026-75146 CVE-2026-75147" +CVE_BACKPORTS_v9_0_1[status] = "cpe-stable-backport: fix backported to v9.0.1"
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#246710): https://lists.openembedded.org/g/openembedded-core/message/246710 Mute This Topic: https://lists.openembedded.org/mt/121460521/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
