mirror of
https://git.yoctoproject.org/poky
synced 2026-05-15 05:27:54 +02:00
48269c1e3f
Both CVEs are disputed by third parties. The observed behavior (double free / invalid pointer free in readelf) only occurred in pre-release code and did not affect any tagged version [1][2]. CVE_STATUS[CVE-2025-69650] = "disputed: observed behavior only in pre-release code, does not affect any tagged version" CVE_STATUS[CVE-2025-69651] = "disputed: observed behavior only in pre-release code, does not affect any tagged version" [1] https://www.cve.org/CVERecord?id=CVE-2025-69650 [2] https://www.cve.org/CVERecord?id=CVE-2025-69651 (From OE-Core rev: 55a0d8abad8a81f7d900557c2eb2d9327ee115df) Signed-off-by: Adarsh Jagadish Kamini <adarsh.jagadish.kamini@est.tech> (cherry picked from commit 9c6df56fe18237880c391798c2083dca595566f4) Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>