From 80175b4a47aa3a83c305a0c03a7a765e52a0841d Mon Sep 17 00:00:00 2001 From: Gyorgy Sarvari Date: Thu, 8 Jan 2026 11:53:04 +0100 Subject: [PATCH] imagemagick: mark CVE-2023-5341 as patched Details: https://nvd.nist.gov/vuln/detail/CVE-2023-5341 The fix[1] mentioned in the NVD report has been part of the recipe since 7.1.1-19. [1]: https://github.com/ImageMagick/ImageMagick/commit/aa673b2e4defc7cad5bec16c4fc8324f71e531f1 Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal --- meta-oe/recipes-support/imagemagick/imagemagick_7.1.1.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta-oe/recipes-support/imagemagick/imagemagick_7.1.1.bb b/meta-oe/recipes-support/imagemagick/imagemagick_7.1.1.bb index a8029426da..f947b8e9c6 100644 --- a/meta-oe/recipes-support/imagemagick/imagemagick_7.1.1.bb +++ b/meta-oe/recipes-support/imagemagick/imagemagick_7.1.1.bb @@ -180,3 +180,4 @@ CVE_STATUS[CVE-2017-5506] = "cpe-incorrect: The current version (7.1.1) is not a CVE_STATUS[CVE-2017-5509] = "cpe-incorrect: The current version (7.1.1) is not affected by the CVE which affects versions at least earlier than 7.0.4-4" CVE_STATUS[CVE-2017-5510] = "cpe-incorrect: The current version (7.1.1) is not affected by the CVE which affects versions at least earlier than 7.0.4-4" CVE_STATUS[CVE-2017-5511] = "cpe-incorrect: The current version (7.1.1) is not affected by the CVE which affects versions at least earlier than 7.0.4-3" +CVE_STATUS[CVE-2023-5341] = "fixed-version: Fix is included since 7.1.1-19"