diff mbox series

[meta-python,4/4] python3-lief: mark CVE-2025-15504 patched

Message ID 20260119175505.777598-4-skandigraun@gmail.com
State Under Review
Headers show
Series [meta-python,1/4] python3-werkzeug: upgrade 3.1.4 -> 3.1.5 | expand

Commit Message

Gyorgy Sarvari Jan. 19, 2026, 5:55 p.m. UTC 
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-15504

The vulnerability is patched in v0.17.2, however NVD is currently tracking
the CVE without any version info (or more like with out any CPE info)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
---
 meta-python/recipes-devtools/python/python3-lief_0.17.2.bb | 1 +
 1 file changed, 1 insertion(+)
diff mbox series

Patch

diff --git a/meta-python/recipes-devtools/python/python3-lief_0.17.2.bb b/meta-python/recipes-devtools/python/python3-lief_0.17.2.bb
index e7de6b6d3b..44b4976ab1 100644
--- a/meta-python/recipes-devtools/python/python3-lief_0.17.2.bb
+++ b/meta-python/recipes-devtools/python/python3-lief_0.17.2.bb
@@ -13,6 +13,7 @@  SRC_URI = " \
 "
 
 CVE_PRODUCT = "lief"
+CVE_STATUS[CVE-2025-15504] = "fixed-version: the vulnerability is fixed since v0.17.2"
 
 PEP517_SOURCE_PATH = "${S}/api/python"