bit7z: set status for CVE-2026-45380 and CVE-2026-45384

These CVEs were fixed in 4.0.12 as seen in release notes [1].
Current CVE-CHECK still reports them as unfixed, correct it.

[1] https://github.com/rikyoz/bit7z/releases/tag/v4.0.12

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
This commit is contained in:
Peter Marko
2026-07-19 21:50:19 +02:00
committed by Khem Raj
parent 8bf7599965
commit dd90760c11
@@ -82,3 +82,6 @@ ALLOW_EMPTY:${PN} = "1"
RDEPENDS:${PN}-ptest += "libstdc++ 7zip"
# test data contains various file types with different architectures
INSANE_SKIP:${PN}-ptest += "arch"
CVE_STATUS[CVE-2026-45380] = "fixed-version: Fixed since 4.0.12"
CVE_STATUS[CVE-2026-45384] = "fixed-version: Fixed since 4.0.12"