diff mbox series

bzip2: add bzip2:bzip2 to CVE_PRODUCT

Message ID 20260723043843.510113-1-mark.yang@lge.com
State Under Review
Headers show
Series bzip2: add bzip2:bzip2 to CVE_PRODUCT | expand

Commit Message

mark.yang July 23, 2026, 4:38 a.m. UTC 
From: "mark.yang" <mark.yang@lge.com>

The CERT-PL record for CVE-2026-42250 carries bzip2:bzip2 in its
affected entry [1], which the bzip:bzip2 pin does not cover, so tools
consuming CNA identities cannot connect the in-tree
CVE-2026-42250.patch to the CVE. NVD has not analysed the entry yet
and currently mirrors the same bzip2:bzip2 identity.

[1] https://www.cve.org/CVERecord?id=CVE-2026-42250

Signed-off-by: mark.yang <mark.yang@lge.com>
---
 meta/recipes-extended/bzip2/bzip2_1.0.8.bb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
diff mbox series

Patch

diff --git a/meta/recipes-extended/bzip2/bzip2_1.0.8.bb b/meta/recipes-extended/bzip2/bzip2_1.0.8.bb
index 39f0f6749d..3bc74d74aa 100644
--- a/meta/recipes-extended/bzip2/bzip2_1.0.8.bb
+++ b/meta/recipes-extended/bzip2/bzip2_1.0.8.bb
@@ -67,7 +67,7 @@  FILES:libbz2 = "${libdir}/lib*${SOLIBS}"
 
 RDEPENDS:${PN}-ptest += "make bash"
 
-CVE_PRODUCT = "bzip:bzip2"
+CVE_PRODUCT = "bzip:bzip2 bzip2:bzip2"
 
 PROVIDES:append:class-native = " bzip2-replacement-native"
 BBCLASSEXTEND = "native nativesdk"