* [meta-virtualization][PATCH] crun: set status for CVE-2025-24965
@ 2026-07-19 20:48 Peter Marko
2026-07-20 21:40 ` Bruce Ashfield
0 siblings, 1 reply; 2+ messages in thread
From: Peter Marko @ 2026-07-19 20:48 UTC (permalink / raw)
To: meta-virtualization; +Cc: Peter Marko
From: Peter Marko <peter.marko@siemens.com>
This CVE was fixed in v1.20.
This is mentione in NVD report description [1] and github advisory [2].
Explicitly set CVE_STATUS because cve-check still reports it as open.
[1] https://nvd.nist.gov/vuln/detail/CVE-2025-24965
[2] https://github.com/containers/crun/security/advisories/GHSA-f42g-r5jj-qh4j
Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
recipes-containers/crun/crun_git.bb | 2 ++
1 file changed, 2 insertions(+)
diff --git a/recipes-containers/crun/crun_git.bb b/recipes-containers/crun/crun_git.bb
index 1fa9f886..1b0443f1 100644
--- a/recipes-containers/crun/crun_git.bb
+++ b/recipes-containers/crun/crun_git.bb
@@ -67,3 +67,5 @@ RCONFLICTS:${PN} = "${@'runc' if d.getVar('CRUN_AS_RUNC') else ''}"
REQUIRED_DISTRO_FEATURES:class-native ?= ""
DEPENDS:class-native += "yajl libcap go-md2man m4 libseccomp"
BBCLASSEXTEND = "native"
+
+CVE_STATUS[CVE-2025-24965] = "fixed-version: Fixed since 1.20"
^ permalink raw reply related [flat|nested] 2+ messages in thread
* Re: [meta-virtualization][PATCH] crun: set status for CVE-2025-24965
2026-07-19 20:48 [meta-virtualization][PATCH] crun: set status for CVE-2025-24965 Peter Marko
@ 2026-07-20 21:40 ` Bruce Ashfield
0 siblings, 0 replies; 2+ messages in thread
From: Bruce Ashfield @ 2026-07-20 21:40 UTC (permalink / raw)
To: peter.marko, meta-virtualization
merged
Bruce
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2026-07-20 21:40 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-07-19 20:48 [meta-virtualization][PATCH] crun: set status for CVE-2025-24965 Peter Marko
2026-07-20 21:40 ` Bruce Ashfield
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.