From 8bf759996525c69c09b7f6abfc4344c03c989547 Mon Sep 17 00:00:00 2001 From: Peter Marko Date: Sun, 19 Jul 2026 21:35:23 +0200 Subject: [PATCH] 7zip: set status for CVE-2026-58052 Per Debian team investogations, this can only occur on Windows. See main CVE page [1] which links to detailed explanation [2]. [1] https://security-tracker.debian.org/tracker/CVE-2026-58052 [2] https://lists.debian.org/debian-lts/2026/07/msg00038.html Signed-off-by: Peter Marko Signed-off-by: Khem Raj --- meta-oe/recipes-extended/7zip/7zip_26.02.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-oe/recipes-extended/7zip/7zip_26.02.bb b/meta-oe/recipes-extended/7zip/7zip_26.02.bb index 8037bfe039..e3674d8410 100644 --- a/meta-oe/recipes-extended/7zip/7zip_26.02.bb +++ b/meta-oe/recipes-extended/7zip/7zip_26.02.bb @@ -68,3 +68,5 @@ RPROVIDES:${PN} += "lib7z.so()(64bit) 7z lib7z.so" RPROVIDES:${PN}-dev += "lib7z.so()(64bit) 7z lib7z.so" BBCLASSEXTEND = "native nativesdk" + +CVE_STATUS[CVE-2026-58052] = "not-applicable-platform: Issue only applies on Windows"