mirror of
https://git.yoctoproject.org/poky
synced 2026-03-08 00:09:40 +01:00
These CVEs have the same fix commit per NVD report [3]. Blaming the fix [1] is showing that the return without freeing memory was introduced in [2]. [1]d5873be583[2]d38fc25519[3] https://nvd.nist.gov/vuln/detail/CVE-2025-25468 (From OE-Core rev: 67d722ea17ef92e70bfcffbeaba52ddf55d5888a) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>