From 622cd276dd3855d73e24d610f8cda866519b7008 Mon Sep 17 00:00:00 2001 From: Ankur Tyagi Date: Sat, 17 Oct 2026 19:58:40 +1300 Subject: [PATCH] rapidjson: mark CVE-2024-38517 fixed Commit mentioned in the NVD is part of the current version: $ git log HEAD --oneline | grep 8269bc2b 8269bc2b Prevent int underflow when parsing exponents Details: https://nvd.nist.gov/vuln/detail/cve-2024-38517 Signed-off-by: Ankur Tyagi --- meta-oe/recipes-devtools/rapidjson/rapidjson_git.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-oe/recipes-devtools/rapidjson/rapidjson_git.bb b/meta-oe/recipes-devtools/rapidjson/rapidjson_git.bb index fa20b4d448..f565f0a175 100644 --- a/meta-oe/recipes-devtools/rapidjson/rapidjson_git.bb +++ b/meta-oe/recipes-devtools/rapidjson/rapidjson_git.bb @@ -21,3 +21,5 @@ EXTRA_OECMAKE += "-DLIB_INSTALL_DIR=${libdir}" ALLOW_EMPTY:${PN} = "1" BBCLASSEXTEND = "native nativesdk" + +CVE_STATUS[CVE-2024-38517] = "fixed-version: fixed in the current v1.1.0"