gstreamer1.0: ignore CVE-2025-2759

Copy statement from [1] that it is problem of installers (non-Linux).
Also [2] linked in NVD says "Fixed in 1.25.1 Gstreamer Installer".
Since Yocto builds from sources into our own packages, ignore it.

[1] https://security-tracker.debian.org/tracker/CVE-2025-2759
[2] https://www.zerodayinitiative.com/advisories/ZDI-25-268/

(From OE-Core rev: 99ee1df6bde2ffd4fa2ddea44c0a9b94d9d77bae)

Reworked to CVE_CHECK_IGNORE format.

(From OE-Core rev: 2162bc3b305a0b088018e251baad54c356f7855f)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
This commit is contained in:
Peter Marko
2025-10-07 23:02:33 +02:00
committed by Steve Sakoman
parent b5a57a04eb
commit ca3783f70d

View File

@@ -88,4 +88,7 @@ CVE_CHECK_IGNORE += " \
CVE-2024-47777 CVE-2024-47778 CVE-2024-47834 CVE-2025-47183 CVE-2025-47219 \
"
# not-applicable-platform: affects installation packages for non Linux OSes
CVE_CHECK_IGNORE += "CVE-2025-2759"
PTEST_BUILD_HOST_FILES = ""