mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-07-21 05:57:05 +00:00
bit7z: set status for CVE-2026-45380 and CVE-2026-45384
These CVEs were fixed in 4.0.12 as seen in release notes [1]. Current CVE-CHECK still reports them as unfixed, correct it. [1] https://github.com/rikyoz/bit7z/releases/tag/v4.0.12 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
This commit is contained in:
@@ -82,3 +82,6 @@ ALLOW_EMPTY:${PN} = "1"
|
||||
RDEPENDS:${PN}-ptest += "libstdc++ 7zip"
|
||||
# test data contains various file types with different architectures
|
||||
INSANE_SKIP:${PN}-ptest += "arch"
|
||||
|
||||
CVE_STATUS[CVE-2026-45380] = "fixed-version: Fixed since 4.0.12"
|
||||
CVE_STATUS[CVE-2026-45384] = "fixed-version: Fixed since 4.0.12"
|
||||
|
||||
Reference in New Issue
Block a user