From: Peter Marko <[email protected]> This CVE is fixed via commit [1] included in current hash. It is backported commit of [2] mentioned to fix this CVE in [3].
[1] https://sourceware.org/git/?p=glibc.git;a=commit;h=d6ff274313d79feb864cc10eb775b91c817a67e9 [2] https://sourceware.org/git/?p=glibc.git;a=commit;h=e2789c46e3bfdcd67a82bea9946b315c179e83d3 [3] https://security-tracker.debian.org/tracker/CVE-2026-19542 Signed-off-by: Peter Marko <[email protected]> --- meta/recipes-core/glibc/glibc_2.44.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-core/glibc/glibc_2.44.bb b/meta/recipes-core/glibc/glibc_2.44.bb index b4a5fbf8c3..d547f595ab 100644 --- a/meta/recipes-core/glibc/glibc_2.44.bb +++ b/meta/recipes-core/glibc/glibc_2.44.bb @@ -22,7 +22,7 @@ CVE_STATUS[CVE-2025-0577] = "not-applicable-platform: specific to RHEL patches" # when upgrading, clear CVE list but keep the variables CVE_STATUS_GROUPS += "CVE_STATUS_STABLE_BACKPORTS" CVE_STATUS_STABLE_BACKPORTS = "\ - CVE-2026-5435 \ + CVE-2026-5435 CVE-2026-19542 \ " CVE_STATUS_STABLE_BACKPORTS[status] = "cpe-stable-backport: fix available in used git hash"
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#246708): https://lists.openembedded.org/g/openembedded-core/message/246708 Mute This Topic: https://lists.openembedded.org/mt/121460514/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
