From 522a522cb765ddc9ce43903464f7ee632a5e0722 Mon Sep 17 00:00:00 2001 From: Gyorgy Sarvari Date: Sat, 7 Feb 2026 11:33:46 +0100 Subject: [PATCH] mongodb: ignore CVE-2025-14911 Details: https://nvd.nist.gov/vuln/detail/CVE-2025-14911 The CVE is currently tracked without valid CPE. The vulnerability affects mongo-c-driver component, not mongodb. They are also stored in different repositories. Due to this, ignore this CVE. Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal --- .../meta-python/recipes-dbs/mongodb/mongodb_git.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta-oe/dynamic-layers/meta-python/recipes-dbs/mongodb/mongodb_git.bb b/meta-oe/dynamic-layers/meta-python/recipes-dbs/mongodb/mongodb_git.bb index 48bae85179..baa159adf8 100644 --- a/meta-oe/dynamic-layers/meta-python/recipes-dbs/mongodb/mongodb_git.bb +++ b/meta-oe/dynamic-layers/meta-python/recipes-dbs/mongodb/mongodb_git.bb @@ -52,6 +52,7 @@ S = "${WORKDIR}/git" CVE_STATUS[CVE-2014-8180] = "not-applicable-config: Not affecting our configuration so it can be safely ignored." CVE_STATUS[CVE-2017-2665] = "not-applicable-config: Not affecting our configuration so it can be safely ignored." +CVE_STATUS[CVE-2025-14911] = "cpe-incorrect: The vulnerability is about mongo-c-driver application, not mongodb" COMPATIBLE_HOST ?= '(x86_64|i.86|powerpc64|arm|aarch64).*-linux'