diff mbox series

[wrynose,10/17] glibc: CVE-2026-5358 add CVE_STATUS

Message ID 75d7aa9f43395c673a5a41511cee34c5bb62d199.1786633048.git.fabien.thomas@smile.fr
State New
Headers show
Series [wrynose,01/17] selftest: uboot: remove duplicated KVM presence test | expand

Commit Message

Fabien Thomas Aug. 13, 2026, 3:22 p.m. UTC 
From: Adarsh Jagadish Kamini <adarsh.jagadish.kamini@est.tech>

CVE-2026-5358 has been marked rejected.
https://sourceware.org/bugzilla/show_bug.cgi?id=34067#c6

https://inbox.sourceware.org/libc-alpha/20260421164416.4031726-1-carlos@redhat.com/T/#mf76c27025e603294611196b90e428769c9fc5a4e

Add CVE-2026-5358 to CVE_STATUS_RECIPE group as the CVE is disputed
by upstream glibc maintainers.

Signed-off-by: Adarsh Jagadish Kamini <adarsh.jagadish.kamini@est.tech>
Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr>
---
 meta/recipes-core/glibc/glibc_2.43.bb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
diff mbox series

Patch

diff --git a/meta/recipes-core/glibc/glibc_2.43.bb b/meta/recipes-core/glibc/glibc_2.43.bb
index b84c55ca17..a856554782 100644
--- a/meta/recipes-core/glibc/glibc_2.43.bb
+++ b/meta/recipes-core/glibc/glibc_2.43.bb
@@ -5,7 +5,7 @@  require glibc-version.inc
 # glibc https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-1010023
 # glibc https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-1010024
 CVE_STATUS_GROUPS = "CVE_STATUS_RECIPE"
-CVE_STATUS_RECIPE = "CVE-2019-1010022 CVE-2019-1010023 CVE-2019-1010024"
+CVE_STATUS_RECIPE = "CVE-2019-1010022 CVE-2019-1010023 CVE-2019-1010024 CVE-2026-5358"
 CVE_STATUS_RECIPE[status] = "disputed: \
 Upstream glibc maintainers dispute there is any issue and have no plans to address it further. \
 this is being treated as a non-security bug and no real threat."