diff mbox series

[wrynose,38/40] util-linux: set status for CVE-2026-13595

Message ID	6d98aed110fe0f6671cd22833f4e64106e9034dd.1788629392.git.yoann.congal@smile.fr
State	RFC, archived
Delegated to:	Yoann Congal
Headers	show Return-Path: <yoann.congal@smile.fr> ip: 209.85.221.53, mailfrom: yoann.congal@smile.fr) From: Yoann Congal <yoann.congal@smile.fr> To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 38/40] util-linux: set status for CVE-2026-13595 Date: Sat, 5 Sep 2026 22:44:39 +0200 Message-ID: <6d98aed110fe0f6671cd22833f4e64106e9034dd.1788629392.git.yoann.congal@smile.fr> In-Reply-To: <cover.1788629392.git.yoann.congal@smile.fr> References: <cover.1788629392.git.yoann.congal@smile.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[wrynose,01/40] apt: mark CVE-2011-3374 as fixed-version \| expand [wrynose,01/40] apt: mark CVE-2011-3374 as fixed-version [wrynose,02/40] expat: set CVE_STATUS for CVE-2026-72522 [wrynose,03/40] python3-git: fix CVE-2026-42284 [wrynose,04/40] python3-git: fix CVE-2026-42215 [wrynose,05/40] python3-git: fix CVE-2026-44243 [wrynose,06/40] python3-git: fix CVE-2026-44244 [wrynose,07/40] python3-babel: fix CVE_PRODUCT [wrynose,08/40] python3-pycryptodome: fix CVE_PRODUCT [wrynose,09/40] python3-dbusmock: fix CVE_PRODUCT [wrynose,10/40] python3-wheel: fix CVE_PRODUCT [wrynose,11/40] python3-click: fix CVE_PRODUCT [wrynose,12/40] python3-attrs: fix CVE_PRODUCT [wrynose,13/40] python3-numpy: fix CVE_PRODUCT [wrynose,14/40] python3-pycryptodomex: fix CVE_PRODUCT [wrynose,15/40] python3-mako: upgrade 1.3.10 -> 1.3.12 [wrynose,16/40] gnutls: fix for CVE-2026-42011 [wrynose,17/40] gnutls: fix CVE-2026-42010 [wrynose,18/40] alsa-lib: patch CVE-2026-56109 [wrynose,19/40] libevent: upgrade 2.1.12 -> 2.1.13 [wrynose,20/40] libevent: set status for CVE-2026-63380 [wrynose,21/40] libxfont2: Fix CVE-2026-56001 [wrynose,22/40] libxfont2: Fix CVE-2026-56002 [wrynose,23/40] libxfont2: Fix CVE-2026-56003 [wrynose,24/40] util-linux: Fix CVE-2026-3184 [wrynose,25/40] python3: upgrade 3.14.6 -> 3.14.7 [wrynose,26/40] volatile-binds: order systemd-timesyncd after /var/lib [wrynose,27/40] go: upgrade 1.26.5 -> 1.26.6 [wrynose,28/40] python3: add missing pyc files to core [wrynose,29/40] python3: fix stringold cache files [wrynose,30/40] python3-git: fix CVE_PRODUCT [wrynose,31/40] binutils: stable 2.46 branch updates [wrynose,32/40] python3-click: upgrade 8.3.1 -> 8.3.3 [wrynose,33/40] python3-idna: Fix CVE-2026-45409 [wrynose,34/40] perl: fix CVE-2026-42496 and CVE-2026-42497 [wrynose,35/40] libssh2: Fix CVE-2026-58051 [wrynose,36/40] python3-cryptography: backport stray file install fix [wrynose,37/40] qemu: guard RESOLVE_CACHED strace flag [wrynose,38/40] util-linux: set status for CVE-2026-13595 [wrynose,39/40] go: upgrade 1.26.6 -> 1.26.7 [wrynose,40/40] scripts/install-buildtools: Update to 6.0.3

Commit Message

Yoann Congal Sept. 5, 2026, 8:44 p.m. UTC

From: Peter Marko <peter.marko@siemens.com>

Per [1] this bas backported to 2.41.5.

[1] https://security-tracker.debian.org/tracker/CVE-2026-13595

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
[YC:
Fixed the inequality in the comment, commit message and [1]
tell ">= 2.41.5".
]
---
 meta/recipes-core/util-linux/util-linux.inc | 2 ++
 1 file changed, 2 insertions(+)

diff mbox series

Patch

diff --git a/meta/recipes-core/util-linux/util-linux.inc b/meta/recipes-core/util-linux/util-linux.inc
index fdc62acc748..09916594b0a 100644
--- a/meta/recipes-core/util-linux/util-linux.inc
+++ b/meta/recipes-core/util-linux/util-linux.inc
@@ -26,3 +26,5 @@  SRC_URI = "${KERNELORG_MIRROR}/linux/utils/util-linux/v${MAJOR_VERSION}/util-lin
 SRC_URI[sha256sum] = "f586e35d320ff537aab3ffeca37e9ecd482ccbe013590db4429a414d8aa6a728"
 
 CVE_PRODUCT = "util-linux"
+
+CVE_STATUS[CVE-2026-13595] = "cpe-stable-backport: Fixed from version >=2.41.5"