diff options
| author | Gyorgy Sarvari <skandigraun@gmail.com> | 2026-03-17 18:23:42 +0100 |
|---|---|---|
| committer | Khem Raj <raj.khem@gmail.com> | 2026-03-18 14:33:32 -0700 |
| commit | b81ba45156a9143e06aa15363e825edc4e938a3b (patch) | |
| tree | cdb43b404e0c299a277c3f0e74c1fbfc9bdadb89 /meta-oe/recipes-support | |
| parent | 1cad6f53a40db5268ad0054b0526367b11a00bdf (diff) | |
| download | meta-openembedded-b81ba45156a9143e06aa15363e825edc4e938a3b.tar.gz | |
exiv2: mark CVE-2026-27631 patched
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-27631
Though NVD indicates that 0.28.8 is still vulnerable, that does
not seem to be the case: the fix that is referenced by the advisory
has been backported[1] to this verison. Due to this, mark this
CVE as patched.
[1]: https://github.com/Exiv2/exiv2/commit/21d129c842212c198dd887dbaafc5ce734e9dfad
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Diffstat (limited to 'meta-oe/recipes-support')
| -rw-r--r-- | meta-oe/recipes-support/exiv2/exiv2_0.28.8.bb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/meta-oe/recipes-support/exiv2/exiv2_0.28.8.bb b/meta-oe/recipes-support/exiv2/exiv2_0.28.8.bb index df0e72f5d6..9369daa805 100644 --- a/meta-oe/recipes-support/exiv2/exiv2_0.28.8.bb +++ b/meta-oe/recipes-support/exiv2/exiv2_0.28.8.bb | |||
| @@ -36,3 +36,5 @@ do_install_ptest(){ | |||
| 36 | install -d ${D}${PTEST_PATH}/src | 36 | install -d ${D}${PTEST_PATH}/src |
| 37 | install ${S}/src/canonmn_int.cpp ${D}${PTEST_PATH}/src | 37 | install ${S}/src/canonmn_int.cpp ${D}${PTEST_PATH}/src |
| 38 | } | 38 | } |
| 39 | |||
| 40 | CVE_STATUS[CVE-2026-27631] = "fixed-version: fixed in 0.28.8" | ||