mirror of
https://git.yoctoproject.org/poky
synced 2026-10-22 19:18:18 +00:00
dhcpcd: set status for CVE-2026-56116
Patch [1] mentioned as commit fixing this CVE in NVD or Debian reports is fixing code adding new feature (route advertisment processing) which is also mentioned in the CVE descripiton. That was introduced in commit [2] which is v10.0.7 (>10.0.6) [1] https://github.com/NetworkConfiguration/dhcpcd/commit/708b4a56bae080a5b18c2e0c4c6fbe103131a2b0 [2] https://github.com/NetworkConfiguration/dhcpcd/commit/f1cf924ad691bc1e6bf33013407fbf838fa40fbe (From OE-Core rev: 26acbf957a5aae69afadb40b05e99b26ff92b889) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>
This commit is contained in:
1 parent
25a3de31bc
commit
b61a46bd33
1 file changed
+2
@@ -62,3 +62,5 @@ do_install:append () {
|
||||
}
|
||||
|
||||
FILES:${PN}-dbg += "${libdir}/dhcpcd/dev/.debug"
|
||||
|
||||
CVE_STATUS[CVE-2026-56116] = "fixed-version: vulnerability was only introduced in v10.0.7"
|
||||
Reference in new issue
Block a user