mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-10-15 18:27:12 +00:00
libraw: ignore CVE-2026-5318
Vulnerability exists in the function which was added in version 0.22.0[1] Details: https://nvd.nist.gov/vuln/detail/CVE-2026-5318 [1] https://github.com/LibRaw/LibRaw/commit/12b0e5d60c57bb795382fda8494fc45f683550b8 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
1 parent
d17d94e0e0
commit
964432f3af
1 file changed
+2
@@ -14,3 +14,5 @@ S = "${WORKDIR}/git"
|
||||
inherit autotools pkgconfig
|
||||
|
||||
DEPENDS = "jpeg jasper lcms"
|
||||
|
||||
CVE_STATUS[CVE-2026-5318] = "cpe-incorrect: The current version (0.21.2) is not affected."
|
||||
Reference in new issue
Block a user