[scarthgap,08/33] go-binary-native: ignore CVE-2025-0913

Message ID	63dfdbf774dc24ea4e736a6d13d6aa8c72ebee4d.1756329972.git.steve@sakoman.com
State	Accepted
Delegated to:	Steve Sakoman
Headers	show Return-Path: <steve@sakoman.com> ip: 209.85.215.179, mailfrom: steve@sakoman.com) From: Steve Sakoman <steve@sakoman.com> To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 08/33] go-binary-native: ignore CVE-2025-0913 Date: Wed, 27 Aug 2025 14:29:15 -0700 Message-ID: <63dfdbf774dc24ea4e736a6d13d6aa8c72ebee4d.1756329972.git.steve@sakoman.com> In-Reply-To: <cover.1756329972.git.steve@sakoman.com> References: <cover.1756329972.git.steve@sakoman.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[scarthgap,01/33] go: fix CVE-2025-4674 \| expand [scarthgap,01/33] go: fix CVE-2025-4674 [scarthgap,02/33] gstreamer1.0-plugins-base: fix CVE-2025-47807 [scarthgap,03/33] ffmpeg: upgrade 6.1.2 -> 6.1.3 [scarthgap,04/33] ffmpeg: fix CVE-2025-1594 [scarthgap,05/33] go: fix CVE-2025-47907 [scarthgap,06/33] ncurses: Pin to C17 standard [scarthgap,07/33] qemu: set status of CVE-2024-7730 to fixed [scarthgap,08/33] go-binary-native: ignore CVE-2025-0913 [scarthgap,09/33] glib-2.0: patch CVE-2025-7039 [scarthgap,10/33] glib-2.0: patch CVE-2025-6052 [scarthgap,11/33] dpkg: patch CVE-2025-6297 [scarthgap,12/33] libarchive: patch regression of patch for CVE-2025-5918 [scarthgap,13/33] vim: upgrade 9.1.1198 -> 9.1.1652 [scarthgap,14/33] cmake: fix build with gcc-15 on host [scarthgap,15/33] git: fix build with gcc-15 on host [scarthgap,16/33] unzip: Fix build with GCC-15 [scarthgap,17/33] m4: Stick to C17 standard [scarthgap,18/33] gmp: Fix build with GCC15/C23 [scarthgap,19/33] gmp: Fix build with older gcc versions [scarthgap,20/33] gdbm: Use C11 standard [scarthgap,21/33] unifdef: Don't use C23 constexpr keyword [scarthgap,22/33] pkgconfig: fix build with gcc-15 [scarthgap,23/33] libgpg-error: fix build with gcc-15 [scarthgap,24/33] rust-llvm: fix build with gcc-15 [scarthgap,25/33] libtirpc: Fix build with gcc-15/C23 [scarthgap,26/33] elfutils: fix build with gcc-15 [scarthgap,27/33] binutils: fix build with gcc-15 [scarthgap,28/33] dbus-glib: fix build with gcc-15 [scarthgap,29/33] yocto-uninative: Update to 4.8 for GCC 15.1 [scarthgap,30/33] yocto-uninative: Update to 4.9 for glibc 2.42 [scarthgap,31/33] cpio: Pin to use C17 std [scarthgap,32/33] ruby-ptest : some ptest fixes [scarthgap,33/33] sudo: remove devtool FIXME comment

Message ID

63dfdbf774dc24ea4e736a6d13d6aa8c72ebee4d.1756329972.git.steve@sakoman.com

State

Accepted

Delegated to:

Steve Sakoman

Headers

From: Steve Sakoman <steve@sakoman.com>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][scarthgap 08/33] go-binary-native: ignore CVE-2025-0913
Date: Wed, 27 Aug 2025 14:29:15 -0700
Message-ID: 
 <63dfdbf774dc24ea4e736a6d13d6aa8c72ebee4d.1756329972.git.steve@sakoman.com>
In-Reply-To: <cover.1756329972.git.steve@sakoman.com>
References: <cover.1756329972.git.steve@sakoman.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[scarthgap,01/33] go: fix CVE-2025-4674 | expand

Commit Message

Steve Sakoman Aug. 27, 2025, 9:29 p.m. UTC

From: Peter Marko <peter.marko@siemens.com>

This was already done for all other go recipes.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
 meta/recipes-devtools/go/go-binary-native_1.22.12.bb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/meta/recipes-devtools/go/go-binary-native_1.22.12.bb b/meta/recipes-devtools/go/go-binary-native_1.22.12.bb
index b15b60a691..7688a090f4 100644
--- a/meta/recipes-devtools/go/go-binary-native_1.22.12.bb
+++ b/meta/recipes-devtools/go/go-binary-native_1.22.12.bb
@@ -18,6 +18,7 @@  UPSTREAM_CHECK_REGEX = "go(?P<pver>\d+(\.\d+)+)\.linux"
 
 CVE_PRODUCT = "golang:go"
 CVE_STATUS[CVE-2024-3566] = "not-applicable-platform: Issue only applies on Windows"
+CVE_STATUS[CVE-2025-0913] = "not-applicable-platform: Issue only applies on Windows"
 
 S = "${WORKDIR}/go"

[scarthgap,08/33] go-binary-native: ignore CVE-2025-0913

Commit Message

Patch