From 78f544b69d49abb179be427b7a792f4ea19f89ac Mon Sep 17 00:00:00 2001 From: Thomas Petazzoni Date: Sun, 18 May 2025 10:57:00 +0200 Subject: [PATCH] package/libopenh264: drop stale ignore CVE entry MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The NVD entry for CVE-2025-27091 was not correct, but thanks to having been reported by Raphaël Mélotte, the issue has been fixed on May 6, 2025: https://nvd.nist.gov/vuln/detail/CVE-2025-27091#VulnChangeHistorySection The ignore CVE entry is therefore stale and can be dropped. Signed-off-by: Thomas Petazzoni Signed-off-by: Julien Olivain (cherry picked from commit 38abba37037e3336271b4e0ee069fbb72eba6164) Signed-off-by: Thomas Perale --- package/libopenh264/libopenh264.mk | 3 --- 1 file changed, 3 deletions(-) diff --git a/package/libopenh264/libopenh264.mk b/package/libopenh264/libopenh264.mk index 9ae996fee1..f9a50e4c61 100644 --- a/package/libopenh264/libopenh264.mk +++ b/package/libopenh264/libopenh264.mk @@ -12,9 +12,6 @@ LIBOPENH264_CPE_ID_VENDOR = cisco LIBOPENH264_CPE_ID_PRODUCT = openh264 LIBOPENH264_INSTALL_STAGING = YES -# The following CVE is fixed in 2.5.1, the NVD CPE is not up to date -LIBOPENH264_IGNORE_CVES += CVE-2025-27091 - ifeq ($(BR2_aarch64),y) LIBOPENH264_ARCH = aarch64 else ifeq ($(BR2_arm)$(BR2_armeb),y)