diff options
| author | Gyorgy Sarvari <skandigraun@gmail.com> | 2026-04-13 20:51:04 +0200 |
|---|---|---|
| committer | Khem Raj <khem.raj@oss.qualcomm.com> | 2026-04-13 15:28:25 -0700 |
| commit | b483760dba76bb66bad820ea0246a38692c28c45 (patch) | |
| tree | 10bd3ffed2524c04dce306c2c7b7e86eeacd8ac4 | |
| parent | 4c8dec585a3e634da03c5f2543c8cabeffcfbe2f (diff) | |
| download | meta-openembedded-b483760dba76bb66bad820ea0246a38692c28c45.tar.gz | |
nodejs: mark CVE-2026-21710 patched
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-21710
The CVE is fixed in the current recipe version[1], but NVD tracks it
without verison info.
Mark it as patched in the recipe.
[1]: https://github.com/nodejs/node/blob/v22.x/doc/changelogs/CHANGELOG_V22.md
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
| -rw-r--r-- | meta-oe/recipes-devtools/nodejs/nodejs_22.22.2.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta-oe/recipes-devtools/nodejs/nodejs_22.22.2.bb b/meta-oe/recipes-devtools/nodejs/nodejs_22.22.2.bb index e6dbc866a1..3a1385f70a 100644 --- a/meta-oe/recipes-devtools/nodejs/nodejs_22.22.2.bb +++ b/meta-oe/recipes-devtools/nodejs/nodejs_22.22.2.bb | |||
| @@ -215,6 +215,7 @@ python __anonymous () { | |||
| 215 | 215 | ||
| 216 | BBCLASSEXTEND = "native" | 216 | BBCLASSEXTEND = "native" |
| 217 | 217 | ||
| 218 | CVE_STATUS[CVE-2026-21710] = "fixed-version: fixed since v22.22.2" | ||
| 218 | CVE_STATUS[CVE-2026-21712] = "cpe-incorrect: only v24 and v25 are affected" | 219 | CVE_STATUS[CVE-2026-21712] = "cpe-incorrect: only v24 and v25 are affected" |
| 219 | CVE_STATUS[CVE-2026-21713] = "fixed-version: fixed since v22.22.2" | 220 | CVE_STATUS[CVE-2026-21713] = "fixed-version: fixed since v22.22.2" |
| 220 | CVE_STATUS[CVE-2026-21714] = "fixed-version: fixed since v22.22.2" | 221 | CVE_STATUS[CVE-2026-21714] = "fixed-version: fixed since v22.22.2" |
