From: Adarsh Jagadish Kamini <[email protected]> CVE-2026-5358 has been marked rejected. https://sourceware.org/bugzilla/show_bug.cgi?id=34067#c6
https://inbox.sourceware.org/libc-alpha/[email protected]/T/#mf76c27025e603294611196b90e428769c9fc5a4e Add CVE-2026-5358 to CVE_STATUS_RECIPE group as the CVE is disputed by upstream glibc maintainers. Signed-off-by: Adarsh Jagadish Kamini <[email protected]> Signed-off-by: Fabien Thomas <[email protected]> --- meta/recipes-core/glibc/glibc_2.43.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-core/glibc/glibc_2.43.bb b/meta/recipes-core/glibc/glibc_2.43.bb index b84c55ca17..a856554782 100644 --- a/meta/recipes-core/glibc/glibc_2.43.bb +++ b/meta/recipes-core/glibc/glibc_2.43.bb @@ -5,7 +5,7 @@ require glibc-version.inc # glibc https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-1010023 # glibc https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-1010024 CVE_STATUS_GROUPS = "CVE_STATUS_RECIPE" -CVE_STATUS_RECIPE = "CVE-2019-1010022 CVE-2019-1010023 CVE-2019-1010024" +CVE_STATUS_RECIPE = "CVE-2019-1010022 CVE-2019-1010023 CVE-2019-1010024 CVE-2026-5358" CVE_STATUS_RECIPE[status] = "disputed: \ Upstream glibc maintainers dispute there is any issue and have no plans to address it further. \ this is being treated as a non-security bug and no real threat."
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#243367): https://lists.openembedded.org/g/openembedded-core/message/243367 Mute This Topic: https://lists.openembedded.org/mt/120735234/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
