summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGyorgy Sarvari <skandigraun@gmail.com>2026-02-23 20:18:42 +0100
committerKhem Raj <raj.khem@gmail.com>2026-02-24 22:30:27 -0800
commita4583e0e8012fe661bc2622aab63554324a3c72d (patch)
treeb0560541609d4fe67bb7ae7d9a3e23beb1bb842b
parent4d6e24106c78eed3b9d9a36115df8d2f057f5178 (diff)
downloadmeta-openembedded-a4583e0e8012fe661bc2622aab63554324a3c72d.tar.gz
libcdio: mark CVE-2024-36600 fixed
Details: https://nvd.nist.gov/vuln/detail/CVE-2024-36600 The vulnerability is fixed since 2.2.1.rc1[1], and officially since v2.3.0. However NVD tracks it like v2.3.0 was still vulnerable. Mark the CVE explicitly patched. [1]: https://github.com/libcdio/libcdio/blob/master/NEWS.md Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
-rw-r--r--meta-oe/recipes-multimedia/libcdio/libcdio_2.3.0.bb2
1 files changed, 2 insertions, 0 deletions
diff --git a/meta-oe/recipes-multimedia/libcdio/libcdio_2.3.0.bb b/meta-oe/recipes-multimedia/libcdio/libcdio_2.3.0.bb
index 11e84c6505..20ffbffd98 100644
--- a/meta-oe/recipes-multimedia/libcdio/libcdio_2.3.0.bb
+++ b/meta-oe/recipes-multimedia/libcdio/libcdio_2.3.0.bb
@@ -29,3 +29,5 @@ python libcdio_split_packages() {
29} 29}
30 30
31PACKAGESPLITFUNCS =+ "libcdio_split_packages" 31PACKAGESPLITFUNCS =+ "libcdio_split_packages"
32
33CVE_STATUS[CVE-2024-36600] = "fixed-version: fixed in v2.3.0"