From f516be2c45664c5c03b2245c02995a948e8d2e48 Mon Sep 17 00:00:00 2001 From: Gyorgy Sarvari Date: Mon, 6 Oct 2025 16:14:07 +0200 Subject: [PATCH] gimp: ignore CVE-2025-8672 The vulnerability only affects MacOS: https://nvd.nist.gov/vuln/detail/CVE-2025-8672 While touching it, also remove an outdated CVE_STATUS, which has been reported against a very old version of the application. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj --- meta-gnome/recipes-gimp/gimp/gimp_3.0.4.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-gnome/recipes-gimp/gimp/gimp_3.0.4.bb b/meta-gnome/recipes-gimp/gimp/gimp_3.0.4.bb index 414f9c5203..b04fab67ef 100644 --- a/meta-gnome/recipes-gimp/gimp/gimp_3.0.4.bb +++ b/meta-gnome/recipes-gimp/gimp/gimp_3.0.4.bb @@ -133,4 +133,4 @@ FILES:${PN} += "${datadir}/metainfo" RDEPENDS:${PN} = "mypaint-brushes-1.0 glib-networking python3-pygobject" -CVE_STATUS[CVE-2007-3741] = "not-applicable-platform: This only applies for Mandriva Linux" +CVE_STATUS[CVE-2025-8672] = "not-applicable-config: the vulnerability only affects MacOS"