diff mbox series

[meta-oe,wrynose,17/33] smarty: mark CVEs patched

Message ID	20260907102318.2459883-17-ankur.tyagi85@gmail.com
State	New
Headers	show Return-Path: <ankur.tyagi85@gmail.com> ip: 209.85.161.53, mailfrom: ankur.tyagi85@gmail.com) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi <ankur.tyagi85@gmail.com> Subject: [oe][meta-oe][wrynose][PATCH 17/33] smarty: mark CVEs patched Date: Mon, 7 Sep 2026 22:23:01 +1200 Message-ID: <20260907102318.2459883-17-ankur.tyagi85@gmail.com> In-Reply-To: <20260907102318.2459883-1-ankur.tyagi85@gmail.com> References: <20260907102318.2459883-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[meta-oe,wrynose,1/33] libnfs: patch CVE-2026-53689 \| expand [meta-oe,wrynose,1/33] libnfs: patch CVE-2026-53689 [meta-oe,wrynose,2/33] libnfs: patch CVE-2026-57918 [meta-oe,wrynose,3/33] libssh: ignore CVE-2025-14821 [meta-oe,wrynose,4/33] libssh: mark CVEs patched [meta-oe,wrynose,5/33] libssh: ignore CVE-2025-59842 [meta-networking,wrynose,6/33] miniupnpd: patch CVE-2026-5720 [meta-python,wrynose,7/33] python3-zeroconf: patch CVE-2026-47180 [meta-python,wrynose,8/33] python3-zeroconf: patch CVE-2026-47183 [meta-python,wrynose,9/33] python3-zeroconf: patch CVE-2026-47184 [meta-oe,wrynose,10/33] valkey: mark CVE-2026-56684 and CVE-2026-63639 patched [meta-oe,wrynose,11/33] libyang: patch CVE-2026-41401 [meta-networking,wrynose,12/33] tinyproxy: patch CVE-2026-31842 [meta-networking,wrynose,13/33] tinyproxy: patch CVE-2026-54387 [meta-networking,wrynose,14/33] tinyproxy: patch CVE-2026-55202 [meta-webserver,wrynose,15/33] nginx: mark CVE-2026-1642 patched [meta-networking,wrynose,16/33] open62541: patch CVE-2026-11946 [meta-oe,wrynose,17/33] smarty: mark CVEs patched [meta-oe,wrynose,18/33] tesseract: patch CVE-2026-73066 [meta-oe,wrynose,19/33] tesseract: patch CVE-2026-73067 [meta-networking,wrynose,20/33] wolfssl: mark CVEs patched [meta-networking,wrynose,21/33] wolfssl: patch CVE-2026-10098 [meta-networking,wrynose,22/33] wolfssl: patch CVE-2026-10512 [meta-networking,wrynose,23/33] wolfssl: ignore CVE-2026-12340 [meta-networking,wrynose,24/33] wolfssl: patch CVE-2026-55958 [meta-networking,wrynose,25/33] wolfssl: patch CVE-2026-6091 [meta-networking,wrynose,26/33] wolfssl: patch CVE-2026-6092 [meta-networking,wrynose,27/33] wolfssl: patch CVE-2026-6094 [meta-networking,wrynose,28/33] wolfssl: patch CVE-2026-6291 [meta-networking,wrynose,29/33] wolfssl: patch CVE-2026-6325 [meta-networking,wrynose,30/33] wolfssl: patch CVE-2026-6412 [meta-networking,wrynose,31/33] wolfssl: patch CVE-2026-6450 [meta-networking,wrynose,32/33] wolfssl: patch CVE-2026-6731 [meta-networking,wrynose,33/33] wolfssl: patch CVE-2026-7531

Commit Message

Ankur Tyagi Sept. 7, 2026, 10:23 a.m. UTC

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

CVE-2024-35226[1], CVE-2026-62992[2], CVE-2026-62996[3] are patched in
current version.

Details:
https://nvd.nist.gov/vuln/detail/cve-2024-35226
https://nvd.nist.gov/vuln/detail/cve-2026-62992
https://nvd.nist.gov/vuln/detail/cve-2026-62996

[1]https://github.com/smarty-php/smarty/commit/0be92bc8a6fb83e6e0d883946f7e7c09ba4e857a
[2]https://github.com/smarty-php/smarty/commit/99c048ce7a590c519b79fbd38ad0143a08183a1f
[3]https://github.com/smarty-php/smarty/commit/3c9f77a2e06ce319ae0092496af32cc8f3adc52e

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 meta-oe/recipes-support/smarty/smarty_5.8.4.bb | 4 ++++
 1 file changed, 4 insertions(+)

diff mbox series

Patch

diff --git a/meta-oe/recipes-support/smarty/smarty_5.8.4.bb b/meta-oe/recipes-support/smarty/smarty_5.8.4.bb
index dcb7c85a80..cf6c42345c 100644
--- a/meta-oe/recipes-support/smarty/smarty_5.8.4.bb
+++ b/meta-oe/recipes-support/smarty/smarty_5.8.4.bb
@@ -35,3 +35,7 @@  FILES:${PN} += "${datadir}/php/smarty3/"
 RDEPENDS:${PN} = "php"
 
 CVE_PRODUCT = "smarty:smarty smarty-php:smarty"
+
+CVE_STATUS[CVE-2024-35226] = "fixed-version: fixed since v5.2.0"
+CVE_STATUS[CVE-2026-62992] = "fixed-version: fixed since v5.8.2"
+CVE_STATUS[CVE-2024-62996] = "fixed-version: fixed in v5.8.4"