dhcpcd: set status for CVE-2026-56116

Patch [1] mentioned as commit fixing this CVE in NVD or Debian reports
is fixing code adding new feature (route advertisment processing) which
is also mentioned in the CVE descripiton.
That was introduced in commit [2] which is v10.0.7 (>10.0.6)

[1] https://github.com/NetworkConfiguration/dhcpcd/commit/708b4a56bae080a5b18c2e0c4c6fbe103131a2b0
[2] https://github.com/NetworkConfiguration/dhcpcd/commit/f1cf924ad691bc1e6bf33013407fbf838fa40fbe

(From OE-Core rev: 26acbf957a5aae69afadb40b05e99b26ff92b889)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
This commit is contained in:
Peter Marko authored and Paul Barker committed 2026-10-19 09:03:17 +01:00
1 parent 25a3de31bc
commit b61a46bd33
1 file changed
+2
@@ -62,3 +62,5 @@ do_install:append () {
}
FILES:${PN}-dbg += "${libdir}/dhcpcd/dev/.debug"
CVE_STATUS[CVE-2026-56116] = "fixed-version: vulnerability was only introduced in v10.0.7"