diff mbox series

[5/9] libxfont: set status for CVE-2026-44950 and CVE-2026-59679

Message ID 20260927193609.359250-5-peter.marko@siemens.com
State New
Headers show
Series [1/9] binutils: set status for CVE-2026-3441 and CVE-2026-3442 | expand

Commit Message

Peter Marko Sept. 27, 2026, 7:36 p.m. UTC 
From: Peter Marko <peter.marko@siemens.com>

These CVEs have '?' in affected version (start).
This cannot be parsed by sbom-cve-check so it ends up with
'no-version-ranges'.
Affected version (lessThanOrEqual) is set to 2.0.8.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
 meta/recipes-graphics/xorg-lib/libxfont2_2.0.9.bb | 3 +++
 1 file changed, 3 insertions(+)
diff mbox series

Patch

diff --git a/meta/recipes-graphics/xorg-lib/libxfont2_2.0.9.bb b/meta/recipes-graphics/xorg-lib/libxfont2_2.0.9.bb
index 82ca4d5024..18e822aebd 100644
--- a/meta/recipes-graphics/xorg-lib/libxfont2_2.0.9.bb
+++ b/meta/recipes-graphics/xorg-lib/libxfont2_2.0.9.bb
@@ -21,3 +21,6 @@  PACKAGECONFIG ??= "${@bb.utils.filter('DISTRO_FEATURES', 'ipv6', d)}"
 PACKAGECONFIG[ipv6] = "--enable-ipv6,--disable-ipv6,"
 
 CVE_PRODUCT = "libxfont libxfont2"
+
+CVE_STATUS[CVE-2026-44950] = "fixed-version: fixed since v2.0.9"
+CVE_STATUS[CVE-2026-59679] = "fixed-version: fixed since v2.0.9"