diff mbox series

[3/4] libinput: set status for CVE-2026-35094

Message ID 20260721190005.49809-3-peter.marko@siemens.com
State New
Headers show
Series [1/4] openssh: set status for CVE-2026-55653 | expand

Commit Message

Peter Marko July 21, 2026, 7 p.m. UTC 
From: Peter Marko <peter.marko@siemens.com>

This CVE is fixed in 1.31.1 per [1]
It is present in CVE reports as open because it's RedHat version-less.
This was originally patched and CVE patch was removed during upgrade
1.30.2 -> 1.31.3 because the patch was integrated in that release.

[1] https://security-tracker.debian.org/tracker/CVE-2026-35094

Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
 meta/recipes-graphics/wayland/libinput_1.31.3.bb | 2 ++
 1 file changed, 2 insertions(+)
diff mbox series

Patch

diff --git a/meta/recipes-graphics/wayland/libinput_1.31.3.bb b/meta/recipes-graphics/wayland/libinput_1.31.3.bb
index aed79951ea..11341af63f 100644
--- a/meta/recipes-graphics/wayland/libinput_1.31.3.bb
+++ b/meta/recipes-graphics/wayland/libinput_1.31.3.bb
@@ -47,3 +47,5 @@  RREPLACES:${PN} = "libinput"
 RCONFLICTS:${PN} = "libinput"
 
 FILES:${PN}-ptest += "${libexecdir}/libinput/libinput-test-suite"
+
+CVE_STATUS[CVE-2026-35094] = "fixed-version: Fixed since version 1.31.1"