[meta-oe,scarthgap,6/8] freerdp: ignore CVE-2025-68118

Message ID	20260206082048.1442403-6-skandigraun@gmail.com
State	New
Headers	show Return-Path: <skandigraun@gmail.com> ip: 209.85.221.53, mailfrom: skandigraun@gmail.com) From: Gyorgy Sarvari <skandigraun@gmail.com> To: openembedded-devel@lists.openembedded.org Subject: [meta-oe][scarthgap][PATCH 6/8] freerdp: ignore CVE-2025-68118 Date: Fri, 6 Feb 2026 09:20:46 +0100 Message-ID: <20260206082048.1442403-6-skandigraun@gmail.com> In-Reply-To: <20260206082048.1442403-1-skandigraun@gmail.com> References: <20260206082048.1442403-1-skandigraun@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[meta-oe,scarthgap,1/8] fontforge: patch CVE-2025-15279 \| expand [meta-oe,scarthgap,1/8] fontforge: patch CVE-2025-15279 [meta-oe,scarthgap,2/8] fontforge: patch CVE-2025-15275 [meta-oe,scarthgap,3/8] fontforge: patch CVE-2025-15269 [meta-oe,scarthgap,4/8] fontforge: patch CVE-2025-15270 [meta-networking,scarthgap,5/8] ez-ipupdate: patch CVE-2003-0887 [meta-oe,scarthgap,6/8] freerdp: ignore CVE-2025-68118 [meta-oe,scarthgap,7/8] gimp: ignore CVE-2025-14423 [meta-oe,scarthgap,8/8] gnome-settings-daemon: ignore CVE-2024-38394

Message ID

20260206082048.1442403-6-skandigraun@gmail.com

State

New

Headers

From: Gyorgy Sarvari <skandigraun@gmail.com>
To: openembedded-devel@lists.openembedded.org
Subject: [meta-oe][scarthgap][PATCH 6/8] freerdp: ignore CVE-2025-68118
Date: Fri,  6 Feb 2026 09:20:46 +0100
Message-ID: <20260206082048.1442403-6-skandigraun@gmail.com>
In-Reply-To: <20260206082048.1442403-1-skandigraun@gmail.com>
References: <20260206082048.1442403-1-skandigraun@gmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[meta-oe,scarthgap,1/8] fontforge: patch CVE-2025-15279 | expand

Commit Message

Gyorgy Sarvari Feb. 6, 2026, 8:20 a.m. UTC

Details: https://nvd.nist.gov/vuln/detail/CVE-2025-68118

The vulnerability is specific to the usage of Microsoft specific sprintf
implementation. Because of this, ignore this vulnerability.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 1b4b952b5127ed9c35cae0c6cfd6e1133c79a946)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
---
 meta-oe/recipes-support/freerdp/freerdp_2.11.7.bb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/meta-oe/recipes-support/freerdp/freerdp_2.11.7.bb b/meta-oe/recipes-support/freerdp/freerdp_2.11.7.bb
index d0d7d28b55..d51700c81b 100644
--- a/meta-oe/recipes-support/freerdp/freerdp_2.11.7.bb
+++ b/meta-oe/recipes-support/freerdp/freerdp_2.11.7.bb
@@ -94,3 +94,4 @@  python populate_packages:prepend () {
 }
 
 CVE_STATUS[CVE-2024-32662] = "fixed-version: 2.x is not affected, bug was introduced in 3.0.0"
+CVE_STATUS[CVE-2025-68118] = "not-applicable-platform: Windows-only vulnerability"

[meta-oe,scarthgap,6/8] freerdp: ignore CVE-2025-68118

Commit Message

Patch