From babb18114eb20d1dc4a8772c5aac9dd637fa560d Mon Sep 17 00:00:00 2001 From: Ankur Tyagi Date: Sat, 17 Oct 2026 12:06:28 +1300 Subject: [PATCH] samba: ignore CVE-2026-2340 Also confirmed in the release notes[1] Details: https://nvd.nist.gov/vuln/detail/cve-2026-2340 [1]https://www.samba.org/samba/history/samba-4.23.8.html Signed-off-by: Ankur Tyagi --- meta-networking/recipes-connectivity/samba/samba_4.23.11.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta-networking/recipes-connectivity/samba/samba_4.23.11.bb b/meta-networking/recipes-connectivity/samba/samba_4.23.11.bb index e498b30bcb..c0d8fe4a00 100644 --- a/meta-networking/recipes-connectivity/samba/samba_4.23.11.bb +++ b/meta-networking/recipes-connectivity/samba/samba_4.23.11.bb @@ -46,6 +46,7 @@ UPSTREAM_CHECK_REGEX = "samba\-(?P\d+\.\d+(\.\d+)+).tar.gz" inherit systemd waf-samba cpan-base perlnative update-rc.d perl-version pkgconfig CVE_STATUS[CVE-2011-2411] = "not-applicable-platform: vulnerable only on HP NonStop Servers" +CVE_STATUS[CVE-2026-2340] = "fixed-version: fixed since v4.23.8" # remove default added RDEPENDS on perl RDEPENDS:${PN}:remove = "perl"