diff mbox series

[wrynose,06/52] harfbuzz: set status for CVE-2024-56732

Message ID 2e95f4be90916b10c6ee15245cd0937323169254.1778198557.git.yoann.congal@smile.fr
State New
Headers show
Series [wrynose,01/52] shadow: set CVE_PRODUCT | expand

Commit Message

Yoann Congal May 8, 2026, 7:10 a.m. UTC 
From: Peter Marko <peter.marko@siemens.com>

This CVE does not have cpe in NVD DB.
In cvelistV5 it shows "version": ">= 8.5.0, <= 10.0.1" which is not
parseable with our tooling.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit c5a3d5d58f4886d5c6334c3e8046ac4fe9b8eed6)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
---
 meta/recipes-graphics/harfbuzz/harfbuzz_12.3.2.bb | 2 ++
 1 file changed, 2 insertions(+)
diff mbox series

Patch

diff --git a/meta/recipes-graphics/harfbuzz/harfbuzz_12.3.2.bb b/meta/recipes-graphics/harfbuzz/harfbuzz_12.3.2.bb
index 12bebc4bee4..6ce275acb59 100644
--- a/meta/recipes-graphics/harfbuzz/harfbuzz_12.3.2.bb
+++ b/meta/recipes-graphics/harfbuzz/harfbuzz_12.3.2.bb
@@ -50,3 +50,5 @@  FILES:${PN}-icu-dev = "${libdir}/libharfbuzz-icu.so \
 FILES:${PN}-subset = "${libdir}/libharfbuzz-subset.so.*"
 
 BBCLASSEXTEND = "native nativesdk"
+
+CVE_STATUS[CVE-2024-56732] = "fixed-version: affected versions are >= 8.5.0, <= 10.0.1"