Please drop this patch, the CVE_STATUS for 7zip is not completed, v2
incoming
//Hongxu
On 5/14/26 17:33, hongxu via lists.openembedded.org wrote:
The issues was found in 7-Zip 22.01. Some later versions are unaffected.
Signed-off-by: Hongxu Jia <[email protected]>
---
meta-oe/recipes-extended/7zip/7zip_26.01.bb | 3 +++
1 file changed, 3 insertions(+)
diff --git a/meta-oe/recipes-extended/7zip/7zip_26.01.bb
b/meta-oe/recipes-extended/7zip/7zip_26.01.bb
index a3e124518a..2729edb55d 100644
--- a/meta-oe/recipes-extended/7zip/7zip_26.01.bb
+++ b/meta-oe/recipes-extended/7zip/7zip_26.01.bb
@@ -69,3 +69,6 @@ RPROVIDES:${PN} += "lib7z.so()(64bit) 7z lib7z.so p7zip"
RPROVIDES:${PN}-dev += "lib7z.so()(64bit) 7z lib7z.so"
BBCLASSEXTEND = "native nativesdk"
+
+CVE_STATUS[CVE-2022-47111] = "fixed-version: The issue was found in 7-Zip 22.01.
Some later versions are unaffected."
+CVE_STATUS[CVE-2022-47112] = "fixed-version: The issue was found in 7-Zip 22.01.
Some later versions are unaffected."
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#126987):
https://lists.openembedded.org/g/openembedded-devel/message/126987
Mute This Topic: https://lists.openembedded.org/mt/119310435/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-
