[meta-oe,wrynose,7/28] bcc: mark CVE-2024-2314 patched

Message ID	20260902100511.2105916-7-ankur.tyagi85@gmail.com
State	New
Headers	show Return-Path: <ankur.tyagi85@gmail.com> ip: 209.85.216.49, mailfrom: ankur.tyagi85@gmail.com) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi <ankur.tyagi85@gmail.com> Subject: [oe][meta-oe][wrynose][PATCH 7/28] bcc: mark CVE-2024-2314 patched Date: Wed, 2 Sep 2026 22:04:49 +1200 Message-ID: <20260902100511.2105916-7-ankur.tyagi85@gmail.com> In-Reply-To: <20260902100511.2105916-1-ankur.tyagi85@gmail.com> References: <20260902100511.2105916-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[meta-oe,wrynose,1/28] libmxml: upgrade 4.0.4 -> 4.0.5 \| expand [meta-oe,wrynose,1/28] libmxml: upgrade 4.0.4 -> 4.0.5 [meta-oe,wrynose,2/28] asyncmqtt: upgrade 10.3.0 -> 10.3.1 [meta-oe,wrynose,3/28] php: upgrade 8.5.9 -> 8.5.10 [meta-networking,wrynose,4/28] proftpd: upgrade 1.3.9c -> 1.3.9d [meta-oe,wrynose,5/28] capnproto: ignore CVE-2026-59704 [meta-oe,wrynose,6/28] bubblewrap: mark CVE-2026-41163 patched [meta-oe,wrynose,7/28] bcc: mark CVE-2024-2314 patched [meta-webserver,wrynose,8/28] cockpit: mark CVE-2024-2947 patched [meta-oe,wrynose,9/28] dool: patch CVE-2026-56651 [meta-oe,wrynose,10/28] dool: patch CVE-2026-56652 [meta-networking,wrynose,11/28] dovecot: ignore already fixed CVEs [meta-oe,wrynose,12/28] editorconfig-core-c: ignore CVE-2024-53849 [meta-oe,wrynose,13/28] editorconfig-core-c: patch CVE-2026-40489 [meta-networking,wrynose,14/28] civetweb: ignore CVE-2026-5789 [meta-oe,wrynose,15/28] eject: ignore CVE-2026-28065 [meta-networking,wrynose,16/28] firewalld: patch CVE-2026-4948 [meta-oe,wrynose,17/28] freeipmi: patch CVE-2026-50031 [meta-oe,wrynose,18/28] haveged: ignore CVE-2026-41054 [meta-oe,wrynose,19/28] gpm: ignore CVE-2025-4558 [meta-oe,wrynose,20/28] gpsd: patch CVE-2026-58459 [meta-multimedia,wrynose,21/28] gerbera: ignore CVE-2025-23386 [meta-oe,wrynose,22/28] hostapd: patch CVE-2026-58374 [meta-oe,wrynose,23/28] hdf5: patch CVE-2026-17572 [meta-oe,wrynose,24/28] hdf5: patch CVE-2026-17573 [meta-oe,wrynose,25/28] hdf5: patch CVE-2026-17574 [meta-oe,wrynose,26/28] hdf5: patch CVE-2026-19025 [meta-networking,wrynose,27/28] iftop: ignore CVE-2026-3824, CVE-2026-3825 and CVE-2026-3826 [meta-oe,wrynose,28/28] iniparser: mark CVE-2025-0633 pached

Message ID

20260902100511.2105916-7-ankur.tyagi85@gmail.com

State

New

Headers

From: ankur.tyagi85@gmail.com
To: openembedded-devel@lists.openembedded.org
Cc: Ankur Tyagi <ankur.tyagi85@gmail.com>
Subject: [oe][meta-oe][wrynose][PATCH 7/28] bcc: mark CVE-2024-2314 patched
Date: Wed,  2 Sep 2026 22:04:49 +1200
Message-ID: <20260902100511.2105916-7-ankur.tyagi85@gmail.com>
In-Reply-To: <20260902100511.2105916-1-ankur.tyagi85@gmail.com>
References: <20260902100511.2105916-1-ankur.tyagi85@gmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[meta-oe,wrynose,1/28] libmxml: upgrade 4.0.4 -> 4.0.5 | expand

Commit Message

Ankur Tyagi Sept. 2, 2026, 10:04 a.m. UTC

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

Details:
https://nvd.nist.gov/vuln/detail/cve-2024-2314

Fixes:
WARNING: bcc-0.36.1-r0 do_sbom_cve_check_recipe: bcc-0.36.1: Found unpatched CVEs: CVE-2024-2314

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 .../meta-python/recipes-devtools/bcc/bcc_0.36.1.bb              | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta-oe/dynamic-layers/meta-python/recipes-devtools/bcc/bcc_0.36.1.bb b/meta-oe/dynamic-layers/meta-python/recipes-devtools/bcc/bcc_0.36.1.bb
index 0d8bee5da4..69f5916f94 100644
--- a/meta-oe/dynamic-layers/meta-python/recipes-devtools/bcc/bcc_0.36.1.bb
+++ b/meta-oe/dynamic-layers/meta-python/recipes-devtools/bcc/bcc_0.36.1.bb
@@ -95,3 +95,5 @@  COMPATIBLE_HOST = "(x86_64.*|aarch64.*|powerpc64.*|riscv64.*)-linux"
 # path from the test binary
 WARN_QA:append = "${@bb.utils.contains('PTEST_ENABLED', '1', ' buildpaths', '', d)}"
 ERROR_QA:remove = "${@bb.utils.contains('PTEST_ENABLED', '1', 'buildpaths', '', d)}"
+
+CVE_STATUS[CVE-2024-2314] = "fixed-version: fixed in 0.36.1"

[meta-oe,wrynose,7/28] bcc: mark CVE-2024-2314 patched

Commit Message

Patch