mirror of
https://git.yoctoproject.org/poky
synced 2026-03-11 17:59:39 +01:00
CVE patch [1] as mentioned in [2] relies on several patches not yet available in version 2020.81 we have in kirkstone. The good folks from Debian did the hard work identifying them as they have the same version in bullseye release. The commits were picked from [3] and they have their references to dropbear upstream commits. [1]e5a0ef27c2[2] https://security-tracker.debian.org/tracker/CVE-2025-47203 [3]7f48e75892(From OE-Core rev: 91eeffaf14917c7c994a8de794b915231e69c5d6) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>