[scarthgap,10/27] gnutls: set status for CVE-2026-1584

Message ID	a04716f2209d4d374d7e42388776917fb4179adc.1788326578.git.yoann.congal@smile.fr
State	New
Headers	show Return-Path: <yoann.congal@smile.fr> ip: 209.85.128.53, mailfrom: yoann.congal@smile.fr) From: Yoann Congal <yoann.congal@smile.fr> To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 10/27] gnutls: set status for CVE-2026-1584 Date: Wed, 2 Sep 2026 07:25:27 +0200 Message-ID: <a04716f2209d4d374d7e42388776917fb4179adc.1788326578.git.yoann.congal@smile.fr> In-Reply-To: <cover.1788326578.git.yoann.congal@smile.fr> References: <cover.1788326578.git.yoann.congal@smile.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[scarthgap,01/27] socat: fix native build on host with newer glibc \| expand [scarthgap,01/27] socat: fix native build on host with newer glibc [scarthgap,02/27] glibc: fix CVE-2026-5435 [scarthgap,03/27] systemd: Fix CVE-2026-29111 [scarthgap,04/27] python3-pyasn1: Fix CVE-2026-59886 [scarthgap,05/27] python3-pyasn1: Fix CVE-2026-59884 [scarthgap,06/27] python3: upgrade 3.12.13 -> 3.12.14 [scarthgap,07/27] systemd: upgrade 255.21 -> 255.22 [scarthgap,08/27] libarchive: handle CVE-2026-5121 [scarthgap,09/27] libarchive: patch CVE-2026-5745 [scarthgap,10/27] gnutls: set status for CVE-2026-1584 [scarthgap,11/27] perl: fix CVE-2026-13221 [scarthgap,12/27] perl: fix CVE-2026-57432 [scarthgap,13/27] perl: fix CVE-2025-40909 [scarthgap,14/27] wget: Fix CVE-2026-58469 [scarthgap,15/27] wget: Fix CVE-2026-58471 [scarthgap,16/27] wget: Fix CVE-2026-58472 [scarthgap,17/27] vim: Security Fix for CVE-2026-55693 [scarthgap,18/27] vim: Security Fix for CVE-2026-55892 [scarthgap,19/27] vim: Security Fix for CVE-2026-55895 [scarthgap,20/27] vim: Security Fix for CVE-2026-57452 [scarthgap,21/27] vim: Security Fix for CVE-2026-57455 [scarthgap,22/27] vim: Security Fix for CVE-2026-59856 [scarthgap,23/27] vim: Security Fix for CVE-2026-59857 [scarthgap,24/27] vim: Security Fix for CVE-2026-59858 [scarthgap,25/27] vim: Security Fix for CVE-2026-57456 [scarthgap,26/27] patch: Fix CVE-2026-56289 [scarthgap,27/27] patch: Fix CVE-2026-56288

Message ID

a04716f2209d4d374d7e42388776917fb4179adc.1788326578.git.yoann.congal@smile.fr

State

New

Headers

From: Yoann Congal <yoann.congal@smile.fr>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][scarthgap 10/27] gnutls: set status for CVE-2026-1584
Date: Wed,  2 Sep 2026 07:25:27 +0200
Message-ID: 
 <a04716f2209d4d374d7e42388776917fb4179adc.1788326578.git.yoann.congal@smile.fr>
In-Reply-To: <cover.1788326578.git.yoann.congal@smile.fr>
References: <cover.1788326578.git.yoann.congal@smile.fr>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[scarthgap,01/27] socat: fix native build on host with newer glibc | expand

Commit Message

Yoann Congal Sept. 2, 2026, 5:25 a.m. UTC

From: Peter Marko <peter.marko@siemens.com>

Set status per [1].

[1] https://security-tracker.debian.org/tracker/CVE-2026-1584

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
---
 meta/recipes-support/gnutls/gnutls_3.8.4.bb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/meta/recipes-support/gnutls/gnutls_3.8.4.bb b/meta/recipes-support/gnutls/gnutls_3.8.4.bb
index 676c5c6f940..0eabc517ce5 100644
--- a/meta/recipes-support/gnutls/gnutls_3.8.4.bb
+++ b/meta/recipes-support/gnutls/gnutls_3.8.4.bb
@@ -129,3 +129,4 @@  pkg_postinst_ontarget:${PN}-fips () {
 }
 
 CVE_STATUS[CVE-2026-3832] = "fixed-version: vulnerable multi-record OCSP response handling was introduced in 3.8.8 and is not present in 3.8.4"
+CVE_STATUS[CVE-2026-1584] = "fixed-version: vulnerable code not present, introduced with 3.8.11"

[scarthgap,10/27] gnutls: set status for CVE-2026-1584

Commit Message

Patch