[Buildroot] [git commit] package/freerdp: ignore CVE-2025-4478
Julien Olivain
ju.o at free.fr
Thu Oct 23 19:59:02 UTC 2025
commit: https://git.buildroot.net/buildroot/commit/?id=f741e8f6e6dfdbf5ec204aae0530f42e3b909b79
branch: https://git.buildroot.net/buildroot/commit/?id=refs/heads/master
Signed-off-by: Titouan Christophe <titouan.christophe at mind.be>
Signed-off-by: Julien Olivain <ju.o at free.fr>
---
package/freerdp/freerdp.mk | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/package/freerdp/freerdp.mk b/package/freerdp/freerdp.mk
index 3a1ba61621..391b9a4675 100644
--- a/package/freerdp/freerdp.mk
+++ b/package/freerdp/freerdp.mk
@@ -13,6 +13,10 @@ FREERDP_LICENSE = Apache-2.0
FREERDP_LICENSE_FILES = LICENSE
FREERDP_CPE_ID_VENDOR = freerdp
+# As explained on https://github.com/FreeRDP/FreeRDP/pull/11573#issuecomment-2904160524,
+# the affected code is new with 3.x, was not there on 2.x
+FREERDP_IGNORE_CVES += CVE-2025-4478
+
FREERDP_INSTALL_STAGING = YES
FREERDP_CONF_OPTS = -DWITH_MANPAGES=OFF -Wno-dev -DWITH_GSTREAMER_0_10=OFF
More information about the buildroot
mailing list