diff mbox series

[4/9] ffmpeg: set status for 6 CVEs

Message ID 20260927193609.359250-4-peter.marko@siemens.com
State New
Headers show
Series [1/9] binutils: set status for CVE-2026-3441 and CVE-2026-3442 | expand

Commit Message

Peter Marko Sept. 27, 2026, 7:36 p.m. UTC 
From: Peter Marko <peter.marko@siemens.com>

Per their Debian status, they are fixed in tag n9.0.1.
All these have git hash as fixed version so it cannot be compared to
in Yocto cve-check.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
 meta/recipes-multimedia/ffmpeg/ffmpeg_9.0.2.bb | 3 +++
 1 file changed, 3 insertions(+)
diff mbox series

Patch

diff --git a/meta/recipes-multimedia/ffmpeg/ffmpeg_9.0.2.bb b/meta/recipes-multimedia/ffmpeg/ffmpeg_9.0.2.bb
index bb070d75c5..af92a0b0df 100644
--- a/meta/recipes-multimedia/ffmpeg/ffmpeg_9.0.2.bb
+++ b/meta/recipes-multimedia/ffmpeg/ffmpeg_9.0.2.bb
@@ -181,3 +181,6 @@  CVE_STATUS[CVE-2025-25469] = "fixed-version: these CVEs are fixed since v8.0"
 CVE_STATUS[CVE-2025-59729] = "fixed-version: this CVE are fixed since v8.0"
 CVE_STATUS[CVE-2025-59730] = "fixed-version: this CVE are fixed since v8.0"
 CVE_STATUS[CVE-2026-58049] = "fixed-version: this CVE are fixed since v9.0"
+CVE_STATUS_GROUPS += "CVE_BACKPORTS_v9_0_1"
+CVE_BACKPORTS_v9_0_1 = "CVE-2026-75141 CVE-2026-75142 CVE-2026-75143 CVE-2026-75144 CVE-2026-75145 CVE-2026-75146 CVE-2026-75147"
+CVE_BACKPORTS_v9_0_1[status] = "cpe-stable-backport: fix backported to v9.0.1"