vlc: ignore CVE-2026-26227 and CVE-2026-26228

Details: https://nvd.nist.gov/vuln/detail/CVE-2026-26227
https://nvd.nist.gov/vuln/detail/CVE-2026-26228

Both vulnerabilities affect only the Android version of VLC, not
the other ones. Because of this, ignore these CVEs.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
Gyorgy Sarvari authored and Khem Raj committed 2026-03-17 13:25:16 -07:00
1 parent ec741a75f0
commit 81250fb6c3
1 file changed
+3
@@ -134,3 +134,6 @@ FILES:${PN}-staticdev += "\
INSANE_SKIP:${PN} = "dev-so"
EXCLUDE_FROM_WORLD = "${@bb.utils.contains("LICENSE_FLAGS_ACCEPTED", "commercial", "0", "1", d)}"
CVE_STATUS[CVE-2026-26227] = "not-applicable-platform: the vulnerability is Android-specific"
CVE_STATUS[CVE-2026-26228] = "not-applicable-platform: the vulnerability is Android-specific"