From ac7842ab6bcaf0346a9e2dfead5bdcf91bc9e1f9 Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Sun, 28 Dec 2025 19:56:35 +0100 Subject: [PATCH] package/openvmtools: add CVE trailer in patch Since Buildroot commit [1] the patches that fixes a security vulnerability needs to reference the fixed vulnerability. This patch fixes the information to the patch header to have a single vulnerability per line. [1] 1167d0ff3d docs/manual: mention CVE trailer Signed-off-by: Thomas Perale Signed-off-by: Thomas Petazzoni (cherry picked from commit 96ba06347b33231a79541db516a3e45408a8ed68) Signed-off-by: Thomas Perale --- package/libsoup/0014-CVE-2025-32911.patch | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/package/libsoup/0014-CVE-2025-32911.patch b/package/libsoup/0014-CVE-2025-32911.patch index 102acb4af3..2421e85201 100644 --- a/package/libsoup/0014-CVE-2025-32911.patch +++ b/package/libsoup/0014-CVE-2025-32911.patch @@ -3,7 +3,8 @@ From: Changqing Li Date: Wed, 30 Apr 2025 14:59:55 +0800 Subject: [PATCH] CVE-2025-32911 -CVE: CVE-2025-32911 CVE-2025-32913 +CVE: CVE-2025-32911 +CVE: CVE-2025-32913 Upstream-Status: Backport [https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/422/commits] Upstream: https://git.openembedded.org/meta-openembedded/tree/meta-oe/recipes-support/libsoup/libsoup-2.4/0001-CVE-2025-32911.patch