[meta-oe,scarthgap,22/22] libraw: ignore CVE-2026-5318

Message ID	20260409070919.3968586-22-ankur.tyagi85@gmail.com
State	New
Headers	show Return-Path: <ankur.tyagi85@gmail.com> ip: 209.85.215.181, mailfrom: ankur.tyagi85@gmail.com) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi <ankur.tyagi85@gmail.com> Subject: [oe][meta-oe][scarthgap][PATCH 22/22] libraw: ignore CVE-2026-5318 Date: Thu, 9 Apr 2026 19:09:19 +1200 Message-ID: <20260409070919.3968586-22-ankur.tyagi85@gmail.com> In-Reply-To: <20260409070919.3968586-1-ankur.tyagi85@gmail.com> References: <20260409070919.3968586-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[meta-oe,scarthgap,1/22] abseil-cpp: ignore CVE-2025-0838 \| expand [meta-oe,scarthgap,1/22] abseil-cpp: ignore CVE-2025-0838 [meta-oe,scarthgap,2/22] freerdp3: fix CVE-2026-25941 [meta-oe,scarthgap,3/22] freerdp3: fix CVE-2026-33952 [meta-oe,scarthgap,4/22] freerdp3: fix CVE-2026-23948 [meta-oe,scarthgap,5/22] freerdp3: fix CVE-2026-24491 [meta-oe,scarthgap,6/22] freerdp3: fix CVE-2026-24675 [meta-oe,scarthgap,7/22] freerdp3: fix CVE-2026-24676 [meta-oe,scarthgap,8/22] freerdp3: ignore CVE-2026-24677 and CVE-2026-24678 [meta-oe,scarthgap,9/22] freerdp3: fix CVE-2026-24679 [meta-oe,scarthgap,10/22] freerdp3: fix CVE-2026-24680 and CVE-2026-27950 [meta-oe,scarthgap,11/22] freerdp3: fix CVE-2026-24681 [meta-oe,scarthgap,12/22] freerdp3: fix CVE-2026-24682 [meta-oe,scarthgap,13/22] freerdp3: fix CVE-2026-24683 [meta-oe,scarthgap,14/22] freerdp3: fix CVE-2026-29774 [meta-oe,scarthgap,15/22] freerdp3: fix CVE-2026-29775 [meta-oe,scarthgap,16/22] freerdp3: fix CVE-2026-29776 [meta-oe,scarthgap,17/22] freerdp3: fix CVE-2026-31806 [meta-oe,scarthgap,18/22] freerdp3: fix CVE-2026-31897 [meta-oe,scarthgap,19/22] freerdp3: fix CVE-2026-33984 [meta-oe,scarthgap,20/22] giflib: patch CVE-2025-31344 [meta-multimedia,scarthgap,21/22] libde265: upgrade 1.0.12 -> 1.0.16 [meta-oe,scarthgap,22/22] libraw: ignore CVE-2026-5318

Message ID

20260409070919.3968586-22-ankur.tyagi85@gmail.com

State

New

Headers

From: ankur.tyagi85@gmail.com
To: openembedded-devel@lists.openembedded.org
Cc: Ankur Tyagi <ankur.tyagi85@gmail.com>
Subject: [oe][meta-oe][scarthgap][PATCH 22/22] libraw: ignore CVE-2026-5318
Date: Thu,  9 Apr 2026 19:09:19 +1200
Message-ID: <20260409070919.3968586-22-ankur.tyagi85@gmail.com>
In-Reply-To: <20260409070919.3968586-1-ankur.tyagi85@gmail.com>
References: <20260409070919.3968586-1-ankur.tyagi85@gmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[meta-oe,scarthgap,1/22] abseil-cpp: ignore CVE-2025-0838 | expand

Commit Message

Ankur Tyagi April 9, 2026, 7:09 a.m. UTC

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

Vulnerability exists in the function which was added in version 0.22.0[1]

Details: https://nvd.nist.gov/vuln/detail/CVE-2026-5318

[1] https://github.com/LibRaw/LibRaw/commit/12b0e5d60c57bb795382fda8494fc45f683550b8

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 meta-oe/recipes-support/libraw/libraw_0.21.2.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta-oe/recipes-support/libraw/libraw_0.21.2.bb b/meta-oe/recipes-support/libraw/libraw_0.21.2.bb
index 1303c0e8ac..d285dcefff 100644
--- a/meta-oe/recipes-support/libraw/libraw_0.21.2.bb
+++ b/meta-oe/recipes-support/libraw/libraw_0.21.2.bb
@@ -14,3 +14,5 @@  S = "${WORKDIR}/git"
 inherit autotools pkgconfig
 
 DEPENDS = "jpeg jasper lcms"
+
+CVE_STATUS[CVE-2026-5318] = "cpe-incorrect: The current version (0.21.2) is not affected."

[meta-oe,scarthgap,22/22] libraw: ignore CVE-2026-5318

Commit Message

Patch