From abf11a785d090b2c0c02208a19aba51a09c90a85 Mon Sep 17 00:00:00 2001 From: Ankur Tyagi Date: Mon, 7 Sep 2026 22:22:54 +1200 Subject: [PATCH] valkey: mark CVE-2026-56684 and CVE-2026-63639 patched Also mentioned in the release notes[1] Details: https://nvd.nist.gov/vuln/detail/cve-2026-56684 https://nvd.nist.gov/vuln/detail/cve-2026-63639 [1]https://github.com/valkey-io/valkey/releases/tag/9.0.5 Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal --- meta-oe/recipes-extended/valkey/valkey_9.0.5.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-oe/recipes-extended/valkey/valkey_9.0.5.bb b/meta-oe/recipes-extended/valkey/valkey_9.0.5.bb index d57aa6e1b4..d7ce19ce72 100644 --- a/meta-oe/recipes-extended/valkey/valkey_9.0.5.bb +++ b/meta-oe/recipes-extended/valkey/valkey_9.0.5.bb @@ -74,3 +74,5 @@ INITSCRIPT_PARAMS = "defaults 87" SYSTEMD_SERVICE:${PN} = "valkey.service" CVE_STATUS[CVE-2022-3734] = "not-applicable-platform: CVE only applies for Windows." +CVE_STATUS[CVE-2026-56684] = "fixed-version: fixed in v9.0.5" +CVE_STATUS[CVE-2026-63639] = "fixed-version: fixed in v9.0.5"