On Tue Jul 14, 2026 at 2:53 PM CEST, Paul Barker via lists.openembedded.org wrote: > On Mon, 2026-07-06 at 02:06 -0700, [email protected] wrote: >> From: Harish Sadineni <[email protected]> >> >> CVE-2025-69648 was marked as a duplicate of CVE-2025-69646. The >> existing patch already fixes the issue associated with both CVEs. > > Hi Harish, > > Where was this marked as a duplicate? We need a link to some evidence of > this, or at least a more thorough explanation.
Hello, FYI, when reviewing this I took the fact that both NVD entries[0][1] point to the same patch[2] as proof of duplication (albeit weak). [0]: https://nvd.nist.gov/vuln/detail/CVE-2025-69648 [1]: https://nvd.nist.gov/vuln/detail/CVE-2025-69646 [2]: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=598704a00cbac5e85c2bedd363357b5bf6fcee33 Regards, -- Yoann Congal Smile ECS
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#241279): https://lists.openembedded.org/g/openembedded-core/message/241279 Mute This Topic: https://lists.openembedded.org/mt/120136775/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
