diff mbox series

binutils: Set status for CVE-2025-69649

Message ID 20260408121550.3474166-1-Harish.Sadineni@windriver.com
State New
Headers show
Series binutils: Set status for CVE-2025-69649 | expand

Commit Message

Harish Sadineni April 8, 2026, 12:15 p.m. UTC 
From: Harish Sadineni <Harish.Sadineni@windriver.com>

Set CVE_STATUS for CVE-2025-69649, as this CVE already fixed
with binutils 2.46 version update.

According to the NVD reference [1], the issue is addressed by the upstream commit:
66a3492ce68e1ae45b2489bd9a815c39ea5d7f66

This fix is included in binutils v2.46

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-69649

Signed-off-by: Harish Sadineni <Harish.Sadineni@windriver.com>
---
 meta/recipes-devtools/binutils/binutils-2.46.inc | 1 +
 1 file changed, 1 insertion(+)
diff mbox series

Patch

diff --git a/meta/recipes-devtools/binutils/binutils-2.46.inc b/meta/recipes-devtools/binutils/binutils-2.46.inc
index cd2867c421..d41a3a3f1a 100644
--- a/meta/recipes-devtools/binutils/binutils-2.46.inc
+++ b/meta/recipes-devtools/binutils/binutils-2.46.inc
@@ -20,6 +20,7 @@  UPSTREAM_CHECK_GITTAGREGEX = "binutils-(?P<pver>\d+_(\d_?)*)"
 
 CVE_STATUS[CVE-2025-69650] = "disputed: observed behavior only in pre-release code, does not affect any tagged version"
 CVE_STATUS[CVE-2025-69651] = "disputed: observed behavior only in pre-release code, does not affect any tagged version"
+CVE_STATUS[CVE-2025-69649] = "fixed-version: Fixed from version 2.46"
 
 SRCREV ?= "49d4d3fafa4ec4ff5a3460d91d5b1ed5286487db"
 BINUTILS_GIT_URI ?= "git://sourceware.org/git/binutils-gdb.git;branch=${SRCBRANCH};protocol=https"