Logo
componentcmake
Name
cmake
Version
3.22.3
Type
library
Description
Cross-platform, open-source make system
Licenses
BSD-3-Clause & BSD-1-Clause & MIT
PURL
-
CPE
cpe:2.3:*:cmake_project:cmake:3.22.3:*:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
master
4.3.3
scarthgap
3.28.3

Patches#


#
Title
Author
Resolve
1
CMakeDetermineCompilerABI: Strip -pipe from compile flags
Philip Lorenz <philip.lorenz@bmw.de>
2
Disable use of ext2fs/ext2_fs.h by cmake's internal
Otavio Salvador <otavio@ossystems.com.br>
3
Fail silently if system Qt installation is broken
Otavio Salvador <otavio@ossystems.com.br>
4
CMakeDetermineSystem: use oe environment vars to load default
Cody P Schafer <dev@codyps.com>
5
foreach: Explicitly skip replay without iterations
Tyler Yankee <tyler.yankee@kitware.com>
CVE-2025-9301
6
cmake: support OpenEmbedded Qt4 tool binary names
Otavio Salvador <otavio@ossystems.com.br>
7
ctest: Allow arbitrary characters in test names of
John Drouhard <john@drouhard.dev>

Vulnerabilities#


Name
Analysis
Description
Patched
A vulnerability was determined in cmake 4.1.20250725-gb5cce23. This affects the function cmForEachFunctionBlocker::ReplayItems of the file cmForEachCommand.cxx. This manipulation causes reachable assertion. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. Patch name: 37e27f71bc356d880c908040cd0cb68fa2c371b8. It is suggested to install a patch to address this issue.