freerdp: ignore CVE-2026-22853

Details: https://nvd.nist.gov/vuln/detail/CVE-2026-22853

The vulnerable feature was introduced in v3.9.0[1], the
recipe version is not affected. Ignore this CVE.

[1]: a4bd5ba886

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
Gyorgy Sarvari 2026-02-23 20:18:39 +01:00 committed by Khem Raj
parent e3fbcd0250
commit 3cabaa4ee7
No known key found for this signature in database
GPG Key ID: BB053355919D3314

View File

@ -119,6 +119,7 @@ python populate_packages:prepend () {
CVE_STATUS[CVE-2024-32662] = "fixed-version: 2.x is not affected, bug was introduced in 3.0.0"
CVE_STATUS[CVE-2025-68118] = "not-applicable-platform: Windows-only vulnerability"
CVE_STATUS[CVE-2026-22853] = "cpe-incorrect: the vulnerability was introduced in 3.9.0"
# avoid http://errors.yoctoproject.org/Errors/Details/852862/
# fixed in freerdp3 with https://github.com/FreeRDP/FreeRDP/pull/10553