mirror of
https://git.yoctoproject.org/poky
synced 2026-02-11 03:03:02 +01:00
The patches linked in NVD reports are present in binutils-2_45-branch. Technically the NVD is wrong (=2.45 should be <2.45), but fixing it in the recipe is not problematic as all cpe-stable-backport will be automatically removed in next upgrade so will not be "kept forever". CVE-2025-7545 * https://nvd.nist.gov/vuln/detail/CVE-2025-7545 * https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=08c3cbe5926e4d355b5cb70bbec2b1eeb40c2944 CVE-2025-7546 * https://nvd.nist.gov/vuln/detail/CVE-2025-7546 * https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=41461010eb7c79fee7a9d5f6209accdaac66cc6b (From OE-Core rev: 0fb876e247faea84dfa8fd302b80cb7afdc575d9) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>