From 4a111bac3454ca933cf296a8df36abd357886025 Mon Sep 17 00:00:00 2001 From: Ankur Tyagi Date: Wed, 23 Sep 2026 22:40:21 +1200 Subject: [PATCH] fluidsynth: mark CVEs fixed Release note[1] also confirms the fix. Details: https://nvd.nist.gov/vuln/detail/cve-2026-58264 https://nvd.nist.gov/vuln/detail/cve-2026-61714 https://nvd.nist.gov/vuln/detail/cve-2026-61720 https://nvd.nist.gov/vuln/detail/cve-2026-61721 https://nvd.nist.gov/vuln/detail/cve-2026-61722 https://nvd.nist.gov/vuln/detail/cve-2026-61723 [1]https://github.com/FluidSynth/fluidsynth/releases/tag/v2.5.6 Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal --- .../recipes-multimedia/fluidsynth/fluidsynth_2.5.7.bb | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/meta-multimedia/recipes-multimedia/fluidsynth/fluidsynth_2.5.7.bb b/meta-multimedia/recipes-multimedia/fluidsynth/fluidsynth_2.5.7.bb index 8bf40cbb51..43b9e0c870 100644 --- a/meta-multimedia/recipes-multimedia/fluidsynth/fluidsynth_2.5.7.bb +++ b/meta-multimedia/recipes-multimedia/fluidsynth/fluidsynth_2.5.7.bb @@ -40,3 +40,9 @@ PACKAGECONFIG[sdl] = "-Denable-sdl3=ON,-Denable-sdl3=OFF,libsdl3" PACKAGECONFIG[sndfile] = "-Denable-libsndfile=ON,-Denable-libsndfile=OFF,libsndfile1" PACKAGECONFIG[systemd] = "-Denable-systemd=ON,-Denable-systemd=OFF,systemd" +CVE_STATUS[CVE-2026-58264] = "fixed-version: fixed since v2.5.6" +CVE_STATUS[CVE-2026-61714] = "fixed-version: fixed since v2.5.6" +CVE_STATUS[CVE-2026-61720] = "fixed-version: fixed since v2.5.6" +CVE_STATUS[CVE-2026-61721] = "fixed-version: fixed since v2.5.6" +CVE_STATUS[CVE-2026-61722] = "fixed-version: fixed since v2.5.6" +CVE_STATUS[CVE-2026-61723] = "fixed-version: fixed since v2.5.6"