From 3f97c8455b7cd6c4548c527bf8880e8c252cf56a Mon Sep 17 00:00:00 2001 From: Ankur Tyagi Date: Wed, 23 Sep 2026 22:40:37 +1200 Subject: [PATCH] smarty: mark CVEs patched CVE-2024-35226[1], CVE-2026-62992[2], CVE-2026-62996[3] are patched in current version. Details: https://nvd.nist.gov/vuln/detail/cve-2024-35226 https://nvd.nist.gov/vuln/detail/cve-2026-62992 https://nvd.nist.gov/vuln/detail/cve-2026-62996 [1]https://github.com/smarty-php/smarty/commit/0be92bc8a6fb83e6e0d883946f7e7c09ba4e857a [2]https://github.com/smarty-php/smarty/commit/99c048ce7a590c519b79fbd38ad0143a08183a1f [3]https://github.com/smarty-php/smarty/commit/3c9f77a2e06ce319ae0092496af32cc8f3adc52e Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal --- meta-oe/recipes-support/smarty/smarty_5.8.4.bb | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/meta-oe/recipes-support/smarty/smarty_5.8.4.bb b/meta-oe/recipes-support/smarty/smarty_5.8.4.bb index dcb7c85a80..0c1487f1df 100644 --- a/meta-oe/recipes-support/smarty/smarty_5.8.4.bb +++ b/meta-oe/recipes-support/smarty/smarty_5.8.4.bb @@ -35,3 +35,7 @@ FILES:${PN} += "${datadir}/php/smarty3/" RDEPENDS:${PN} = "php" CVE_PRODUCT = "smarty:smarty smarty-php:smarty" + +CVE_STATUS[CVE-2024-35226] = "fixed-version: fixed since v5.2.0" +CVE_STATUS[CVE-2026-62992] = "fixed-version: fixed since v5.8.2" +CVE_STATUS[CVE-2026-62996] = "fixed-version: fixed in v5.8.4"