diff options
| author | Gyorgy Sarvari <skandigraun@gmail.com> | 2026-04-20 08:27:49 +0200 |
|---|---|---|
| committer | Khem Raj <khem.raj@oss.qualcomm.com> | 2026-04-20 07:35:35 -0700 |
| commit | 7f49deaf7e365b56f5f666aec97569c29e523d70 (patch) | |
| tree | d3bab4184f7448a2c34f08b7a118512789cdc27b /meta-oe/recipes-support | |
| parent | de5f93f95d420447043cedbedf798560925c44e1 (diff) | |
| download | meta-openembedded-7f49deaf7e365b56f5f666aec97569c29e523d70.tar.gz | |
libraw: mark CVE-2026-20911 and CVE-2026-21413 patched
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-20911
https://nvd.nist.gov/vuln/detail/CVE-2026-21413
Both CVEs are tracked with incorrect version info: NVD indicates that
0.22.1 is explicitly vulnerable, but the fixes are actually included
in this release.
Relevant commits:
CVE-2026-20911: https://github.com/LibRaw/LibRaw/commit/5357bb5fc67ac616838fb84de67260d45987489b
CVE-2026-21413: https://github.com/LibRaw/LibRaw/commit/75ed2c12a35b765b3b6ad695cc1f044f19efe644
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Diffstat (limited to 'meta-oe/recipes-support')
| -rw-r--r-- | meta-oe/recipes-support/libraw/libraw_0.22.1.bb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/meta-oe/recipes-support/libraw/libraw_0.22.1.bb b/meta-oe/recipes-support/libraw/libraw_0.22.1.bb index 2e11a7f1f9..e99f0e46b6 100644 --- a/meta-oe/recipes-support/libraw/libraw_0.22.1.bb +++ b/meta-oe/recipes-support/libraw/libraw_0.22.1.bb | |||
| @@ -13,3 +13,5 @@ CVE_STATUS[CVE-2026-5318] = "fixed-version: fixed since 0.22.1" | |||
| 13 | CVE_STATUS[CVE-2026-5342] = "fixed-version: fixed since 0.22.1" | 13 | CVE_STATUS[CVE-2026-5342] = "fixed-version: fixed since 0.22.1" |
| 14 | CVE_STATUS[CVE-2026-20884] = "fixed-version: fixed since 0.22.1" | 14 | CVE_STATUS[CVE-2026-20884] = "fixed-version: fixed since 0.22.1" |
| 15 | CVE_STATUS[CVE-2026-24450] = "fixed-version: fixed since 0.22.1" | 15 | CVE_STATUS[CVE-2026-24450] = "fixed-version: fixed since 0.22.1" |
| 16 | CVE_STATUS[CVE-2026-20911] = "fixed-version: fixed since 0.22.1" | ||
| 17 | CVE_STATUS[CVE-2026-21413] = "fixed-version: fixed since 0.22.1" | ||