CVE Status

From Yocto Project
Revision as of 21:31, 24 August 2023 by RossBurton (talk | contribs)
Jump to navigationJump to search

This is a list of CVEs which are currently being reported as open, and the current state.

CVE-2022-3219 (gnupg)

Hypothetical DoS. A patch was proposed but hasn't been reviewed or merged.

CVE-2022-33065 (libsndfile1)

Integer overflow, still open upstream.

CVE-2022-46456 (nasm)

Buffer overflow, still open upstream.

CVE-2023-0687 (glibc)

Bad CPE, should be marked as fixed in 2.38. Emailed NIST, data not updated yet.

Retrieved from "https://wiki.yoctoproject.org/wiki/index.php?title=CVE_Status&oldid=85885"