From 8980b63179a2d0b744e9e0a152ff741f60479b14 Mon Sep 17 00:00:00 2001 From: Titouan Christophe Date: Thu, 23 Oct 2025 16:05:24 +0200 Subject: [PATCH] package/freerdp: ignore CVE-2025-4478 Signed-off-by: Titouan Christophe Signed-off-by: Julien Olivain (cherry picked from commit f741e8f6e6dfdbf5ec204aae0530f42e3b909b79) Signed-off-by: Thomas Perale --- package/freerdp/freerdp.mk | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/package/freerdp/freerdp.mk b/package/freerdp/freerdp.mk index 3a1ba61621..391b9a4675 100644 --- a/package/freerdp/freerdp.mk +++ b/package/freerdp/freerdp.mk @@ -13,6 +13,10 @@ FREERDP_LICENSE = Apache-2.0 FREERDP_LICENSE_FILES = LICENSE FREERDP_CPE_ID_VENDOR = freerdp +# As explained on https://github.com/FreeRDP/FreeRDP/pull/11573#issuecomment-2904160524, +# the affected code is new with 3.x, was not there on 2.x +FREERDP_IGNORE_CVES += CVE-2025-4478 + FREERDP_INSTALL_STAGING = YES FREERDP_CONF_OPTS = -DWITH_MANPAGES=OFF -Wno-dev -DWITH_GSTREAMER_0_10=OFF