bit7z: set status for CVE-2026-45380 and CVE-2026-45384

These CVEs were fixed in 4.0.12 as seen in release notes [1].
Current CVE-CHECK still reports them as unfixed, correct it.

[1] https://github.com/rikyoz/bit7z/releases/tag/v4.0.12

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Peter Marko
2026-07-19 21:50:32 +02:00
committed by Anuj Mittal
parent 1410436f6a
commit f2f25d7d2d
@@ -80,3 +80,6 @@ ALLOW_EMPTY:${PN} = "1"
RDEPENDS:${PN}-ptest += "libstdc++ 7zip" RDEPENDS:${PN}-ptest += "libstdc++ 7zip"
# test data contains various file types with different architectures # test data contains various file types with different architectures
INSANE_SKIP:${PN}-ptest += "arch" INSANE_SKIP:${PN}-ptest += "arch"
CVE_STATUS[CVE-2026-45380] = "fixed-version: Fixed since 4.0.12"
CVE_STATUS[CVE-2026-45384] = "fixed-version: Fixed since 4.0.12"