Projetos/rpi-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

package/libopenh264: drop stale ignore CVE entry

Browse Source 
The NVD entry for CVE-2025-27091 was not correct, but thanks to having
been reported by Raphaël Mélotte, the issue has been fixed on May 6,
2025:

  https://nvd.nist.gov/vuln/detail/CVE-2025-27091#VulnChangeHistorySection

The ignore CVE entry is therefore stale and can be dropped.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
Thomas Petazzoni
2025-05-18 10:57:00 +02:00
committed by Julien Olivain
parent 114784cb7b
commit 38abba3703
1 changed files with 0 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
package/libopenh264/libopenh264.mk
View File

@@ -12,9 +12,6 @@ LIBOPENH264_CPE_ID_VENDOR = cisco
LIBOPENH264_CPE_ID_PRODUCT = openh264
LIBOPENH264_INSTALL_STAGING = YES
# The following CVE is fixed in 2.5.1, the NVD CPE is not up to date
LIBOPENH264_IGNORE_CVES += CVE-2025-27091
ifeq ($(BR2_aarch64),y)
LIBOPENH264_ARCH = aarch64
else ifeq ($(BR2_arm)$(BR2_armeb),y)