From 7a26befb1536e09cfcd0f5a2af86a6e8105f7b5c Mon Sep 17 00:00:00 2001 From: Ankur Tyagi Date: Wed, 2 Sep 2026 22:04:47 +1200 Subject: [PATCH] capnproto: ignore CVE-2026-59704 Details: https://nvd.nist.gov/vuln/detail/cve-2026-59704 Fixes: WARNING: capnproto-1.4.0-r0 do_sbom_cve_check_recipe: capnproto-1.4.0: Found unpatched CVEs: CVE-2026-59704 Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal --- meta-oe/recipes-devtools/capnproto/capnproto_1.4.0.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta-oe/recipes-devtools/capnproto/capnproto_1.4.0.bb b/meta-oe/recipes-devtools/capnproto/capnproto_1.4.0.bb index 948ff80345..a42131b6e2 100644 --- a/meta-oe/recipes-devtools/capnproto/capnproto_1.4.0.bb +++ b/meta-oe/recipes-devtools/capnproto/capnproto_1.4.0.bb @@ -32,3 +32,4 @@ BBCLASSEXTEND = "native nativesdk" CVE_STATUS[CVE-2026-32239] = "fixed-version: fixed in 1.4.0" CVE_STATUS[CVE-2026-32240] = "fixed-version: fixed in 1.4.0" +CVE_STATUS[CVE-2026-59704] = "cpe-incorrect: the vulnerability is in Cap, which is a different project"