[meta-oe,05/13] libcdio: mark CVE-2024-36600 fixed

Message ID	20260223191850.1049304-5-skandigraun@gmail.com
State	New
Headers	show Return-Path: <skandigraun@gmail.com> ip: 209.85.221.49, mailfrom: skandigraun@gmail.com) From: Gyorgy Sarvari <skandigraun@gmail.com> To: openembedded-devel@lists.openembedded.org Subject: [meta-oe][PATCH 05/13] libcdio: mark CVE-2024-36600 fixed Date: Mon, 23 Feb 2026 20:18:42 +0100 Message-ID: <20260223191850.1049304-5-skandigraun@gmail.com> In-Reply-To: <20260223191850.1049304-1-skandigraun@gmail.com> References: <20260223191850.1049304-1-skandigraun@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[meta-oe,01/13] freerdp: patch CVE-2026-22852 \| expand [meta-oe,01/13] freerdp: patch CVE-2026-22852 [meta-oe,02/13] freerdp: ignore CVE-2026-22853 [meta-gnome,03/13] gimp: ignore already fixed CVEs [meta-gnome,04/13] gnome-shell: ignore CVE-2021-3982 [meta-oe,05/13] libcdio: mark CVE-2024-36600 fixed [meta-multimedia,06/13] minidlna: ignore CVE-2024-51442 [meta-oe,07/13] openjpeg: patch CVE-2023-39327 [meta-oe,08/13] polkit: add info about CVE-2016-2568 [meta-oe,09/13] protobuf: ignore CVE-2026-0994 [meta-oe,10/13] live555: upgrade 20210824 -> 20260112 [meta-python,11/13] python3-pillow: upgrade 12.1.0 -> 12.1.1 [meta-python,12/13] python3-werkzeug: upgrade 3.1.5 -> 3.1.6 [meta-webserver,13/13] webmin: patch CVE-2025-67738

Message ID

20260223191850.1049304-5-skandigraun@gmail.com

State

New

Headers

From: Gyorgy Sarvari <skandigraun@gmail.com>
To: openembedded-devel@lists.openembedded.org
Subject: [meta-oe][PATCH 05/13] libcdio: mark CVE-2024-36600 fixed
Date: Mon, 23 Feb 2026 20:18:42 +0100
Message-ID: <20260223191850.1049304-5-skandigraun@gmail.com>
In-Reply-To: <20260223191850.1049304-1-skandigraun@gmail.com>
References: <20260223191850.1049304-1-skandigraun@gmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[meta-oe,01/13] freerdp: patch CVE-2026-22852 | expand

Commit Message

Gyorgy Sarvari Feb. 23, 2026, 7:18 p.m. UTC

Details: https://nvd.nist.gov/vuln/detail/CVE-2024-36600

The vulnerability is fixed since 2.2.1.rc1[1], and officially
since v2.3.0. However NVD tracks it like v2.3.0 was still vulnerable.
Mark the CVE explicitly patched.

[1]: https://github.com/libcdio/libcdio/blob/master/NEWS.md

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
---
 meta-oe/recipes-multimedia/libcdio/libcdio_2.3.0.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta-oe/recipes-multimedia/libcdio/libcdio_2.3.0.bb b/meta-oe/recipes-multimedia/libcdio/libcdio_2.3.0.bb
index 11e84c6505..20ffbffd98 100644
--- a/meta-oe/recipes-multimedia/libcdio/libcdio_2.3.0.bb
+++ b/meta-oe/recipes-multimedia/libcdio/libcdio_2.3.0.bb
@@ -29,3 +29,5 @@  python libcdio_split_packages() {
 }
 
 PACKAGESPLITFUNCS =+ "libcdio_split_packages"
+
+CVE_STATUS[CVE-2024-36600] = "fixed-version: fixed in v2.3.0"

[meta-oe,05/13] libcdio: mark CVE-2024-36600 fixed

Commit Message

Patch