[meta-oe,scarthgap,1/22] abseil-cpp: ignore CVE-2025-0838

Message ID	20260409070919.3968586-1-ankur.tyagi85@gmail.com
State	New
Headers	show Return-Path: <ankur.tyagi85@gmail.com> ip: 209.85.215.178, mailfrom: ankur.tyagi85@gmail.com) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi <ankur.tyagi85@gmail.com> Subject: [oe][meta-oe][scarthgap][PATCH 1/22] abseil-cpp: ignore CVE-2025-0838 Date: Thu, 9 Apr 2026 19:08:58 +1200 Message-ID: <20260409070919.3968586-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[meta-oe,scarthgap,1/22] abseil-cpp: ignore CVE-2025-0838 \| expand [meta-oe,scarthgap,1/22] abseil-cpp: ignore CVE-2025-0838 [meta-oe,scarthgap,2/22] freerdp3: fix CVE-2026-25941 [meta-oe,scarthgap,3/22] freerdp3: fix CVE-2026-33952 [meta-oe,scarthgap,4/22] freerdp3: fix CVE-2026-23948 [meta-oe,scarthgap,5/22] freerdp3: fix CVE-2026-24491 [meta-oe,scarthgap,6/22] freerdp3: fix CVE-2026-24675 [meta-oe,scarthgap,7/22] freerdp3: fix CVE-2026-24676 [meta-oe,scarthgap,8/22] freerdp3: ignore CVE-2026-24677 and CVE-2026-24678 [meta-oe,scarthgap,9/22] freerdp3: fix CVE-2026-24679 [meta-oe,scarthgap,10/22] freerdp3: fix CVE-2026-24680 and CVE-2026-27950 [meta-oe,scarthgap,11/22] freerdp3: fix CVE-2026-24681 [meta-oe,scarthgap,12/22] freerdp3: fix CVE-2026-24682 [meta-oe,scarthgap,13/22] freerdp3: fix CVE-2026-24683 [meta-oe,scarthgap,14/22] freerdp3: fix CVE-2026-29774 [meta-oe,scarthgap,15/22] freerdp3: fix CVE-2026-29775 [meta-oe,scarthgap,16/22] freerdp3: fix CVE-2026-29776 [meta-oe,scarthgap,17/22] freerdp3: fix CVE-2026-31806 [meta-oe,scarthgap,18/22] freerdp3: fix CVE-2026-31897 [meta-oe,scarthgap,19/22] freerdp3: fix CVE-2026-33984 [meta-oe,scarthgap,20/22] giflib: patch CVE-2025-31344 [meta-multimedia,scarthgap,21/22] libde265: upgrade 1.0.12 -> 1.0.16 [meta-oe,scarthgap,22/22] libraw: ignore CVE-2026-5318

Message ID

20260409070919.3968586-1-ankur.tyagi85@gmail.com

State

New

Headers

From: ankur.tyagi85@gmail.com
To: openembedded-devel@lists.openembedded.org
Cc: Ankur Tyagi <ankur.tyagi85@gmail.com>
Subject: [oe][meta-oe][scarthgap][PATCH 1/22] abseil-cpp: ignore CVE-2025-0838
Date: Thu,  9 Apr 2026 19:08:58 +1200
Message-ID: <20260409070919.3968586-1-ankur.tyagi85@gmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[meta-oe,scarthgap,1/22] abseil-cpp: ignore CVE-2025-0838 | expand

Commit Message

Ankur Tyagi April 9, 2026, 7:08 a.m. UTC

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

The commit[1] mentioned in the NVD[2] is part of the current version[3].

[1] https://github.com/abseil/abseil-cpp/commit/5a0e2cb5e3958dd90bb8569a2766622cb74d90c1
[2] https://nvd.nist.gov/vuln/detail/CVE-2025-0838
[3] https://github.com/abseil/abseil-cpp/commit/54fac219c4ef0bc379dfffb0b8098725d77ac81b

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 meta-oe/recipes-devtools/abseil-cpp/abseil-cpp_20240116.3.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta-oe/recipes-devtools/abseil-cpp/abseil-cpp_20240116.3.bb b/meta-oe/recipes-devtools/abseil-cpp/abseil-cpp_20240116.3.bb
index a11b5cbb53..ff5aedb9c3 100644
--- a/meta-oe/recipes-devtools/abseil-cpp/abseil-cpp_20240116.3.bb
+++ b/meta-oe/recipes-devtools/abseil-cpp/abseil-cpp_20240116.3.bb
@@ -53,3 +53,5 @@  python split_dynamic_packages() {
 ALLOW_EMPTY:${PN} = "1"
 
 BBCLASSEXTEND = "native nativesdk"
+
+CVE_STATUS[CVE-2025-0838] = "cpe-incorrect: The current version (20240116.3) is not affected."

[meta-oe,scarthgap,1/22] abseil-cpp: ignore CVE-2025-0838

Commit Message

Patch