From 6b4b2f8f80f154e6657f2705f8ac613a64e35a70 Mon Sep 17 00:00:00 2001 From: Ankur Tyagi Date: Fri, 11 Sep 2026 11:09:00 +1200 Subject: [PATCH] zabbix: ignore multiple CVEs CVE-2026-23922 https://support.zabbix.com/browse/ZBX-28067 https://nvd.nist.gov/vuln/detail/cve-2026-23922 CVE-2026-23924 https://support.zabbix.com/browse/ZBX-27642 https://nvd.nist.gov/vuln/detail/cve-2026-23924 https://github.com/zabbix/zabbix/blob/7.4.14/ChangeLog#L1856 CVE-2026-23926 https://support.zabbix.com/browse/ZBX-27758 https://nvd.nist.gov/vuln/detail/cve-2026-23926 https://github.com/zabbix/zabbix/blob/7.4.14/ChangeLog#L1787 CVE-2026-23927 https://support.zabbix.com/browse/ZBX-27759 https://nvd.nist.gov/vuln/detail/cve-2026-23927 https://github.com/zabbix/zabbix/blob/7.4.14/ChangeLog#L1785 CVE-2026-23928 https://support.zabbix.com/browse/ZBX-27760 https://nvd.nist.gov/vuln/detail/cve-2026-23928 https://github.com/zabbix/zabbix/blob/7.4.14/ChangeLog#L1786 CVE-2026-23931 https://support.zabbix.com/browse/ZBX-28070 https://nvd.nist.gov/vuln/detail/cve-2026-23931 CVE-2026-23933 https://support.zabbix.com/browse/ZBX-28071 https://nvd.nist.gov/vuln/detail/cve-2026-23933 CVE-2026-23934 https://support.zabbix.com/browse/ZBX-28072 https://nvd.nist.gov/vuln/detail/cve-2026-23934 Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal --- meta-oe/recipes-connectivity/zabbix/zabbix_7.0.24.bb | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/meta-oe/recipes-connectivity/zabbix/zabbix_7.0.24.bb b/meta-oe/recipes-connectivity/zabbix/zabbix_7.0.24.bb index 1ec159cdee..7dcb69b070 100644 --- a/meta-oe/recipes-connectivity/zabbix/zabbix_7.0.24.bb +++ b/meta-oe/recipes-connectivity/zabbix/zabbix_7.0.24.bb @@ -82,3 +82,11 @@ CVE_STATUS[CVE-2026-23919] = "fixed-version: fixed since 7.0.19" CVE_STATUS[CVE-2026-23920] = "fixed-version: fixed since 7.0.22" CVE_STATUS[CVE-2026-23921] = "fixed-version: fixed since 7.0.22" CVE_STATUS[CVE-2026-23923] = "cpe-incorrect: 7.0 versions don't have the vulnerable code" +CVE_STATUS[CVE-2026-23922] = "cpe-incorrect: Only affects 7.4.x" +CVE_STATUS[CVE-2026-23924] = "fixed-version: fixed since 7.0.23" +CVE_STATUS[CVE-2026-23926] = "fixed-version: fixed in 7.0.24" +CVE_STATUS[CVE-2026-23927] = "fixed-version: fixed in 7.0.24" +CVE_STATUS[CVE-2026-23928] = "fixed-version: fixed in 7.0.24" +CVE_STATUS[CVE-2026-23931] = "cpe-incorrect: Only affects 7.4.x" +CVE_STATUS[CVE-2026-23933] = "cpe-incorrect: Only affects 7.4.x" +CVE_STATUS[CVE-2026-23934] = "cpe-incorrect: Only affects 7.4.x"