From: Peter Marko <[email protected]>
Current cve-check code does not correctly decode the entry [1]:
"versions": [
{
"changes": [
{
"at": "patch 4.3.4",
"status": "unaffected"
}
],
"lessThan": "<4.3.4",
"status": "affected",
"version": "0",
"versionType": "git"
}
]
[1]
https://github.com/CVEProject/cvelistV5/blob/main/cves/2025/1xxx/CVE-2025-1866.json
Signed-off-by: Peter Marko <[email protected]>
---
.../recipes-connectivity/libwebsockets/libwebsockets_4.5.8.bb | 2 ++
1 file changed, 2 insertions(+)
diff --git a/meta-oe/recipes-connectivity/libwebsockets/libwebsockets_4.5.8.bb
b/meta-oe/recipes-connectivity/libwebsockets/libwebsockets_4.5.8.bb
index a18f88390e..4fb87342f6 100644
--- a/meta-oe/recipes-connectivity/libwebsockets/libwebsockets_4.5.8.bb
+++ b/meta-oe/recipes-connectivity/libwebsockets/libwebsockets_4.5.8.bb
@@ -72,3 +72,5 @@ RDEPENDS:${PN}-dev += " ${@bb.utils.contains('PACKAGECONFIG',
'static', '${PN}-s
SSTATE_SCAN_FILES += "*.cmake"
BBCLASSEXTEND = "native"
+
+CVE_STATUS[CVE-2025-1866] = "fixed-version: fixed since 4.3.4"
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#128238):
https://lists.openembedded.org/g/openembedded-devel/message/128238
Mute This Topic: https://lists.openembedded.org/mt/120303241/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-
