From a29b32861220b82838c0159ea54500b8c0283632 Mon Sep 17 00:00:00 2001 From: Gyorgy Sarvari Date: Tue, 7 Oct 2025 16:39:09 +0200 Subject: [PATCH] libssh: ignore CVE-2025-5318 and CVE-2025-5987 Both CVEs have been fixed in version 0.11.2. CVE-2025-5318: https://git.libssh.org/projects/libssh.git/commit/?id=5f4ffda88770f95482fd0e66aa44106614dbf466 CVE-2025-5987: https://git.libssh.org/projects/libssh.git/commit/?id=90b4845e0c98574bbf7bea9e97796695f064bf57 Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj --- meta-oe/recipes-support/libssh/libssh_0.11.3.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-oe/recipes-support/libssh/libssh_0.11.3.bb b/meta-oe/recipes-support/libssh/libssh_0.11.3.bb index bfeeccdad4..5928581312 100644 --- a/meta-oe/recipes-support/libssh/libssh_0.11.3.bb +++ b/meta-oe/recipes-support/libssh/libssh_0.11.3.bb @@ -47,3 +47,6 @@ do_install_ptest () { } BBCLASSEXTEND = "native nativesdk" + +CVE_STATUS[CVE-2025-5987] = "fixed-version: The vulnerability was fixed in 0.11.2" +CVE_STATUS[CVE-2025-5318] = "fixed-version: The vulnerability was fixed in 0.11.2"