[meta-networking,wrynose,7/11] zeroconf: ignore CVEs

Message ID	20261014102218.880640-7-ankur.tyagi85@gmail.com
State	New
Headers	show Return-Path: <ankur.tyagi85@gmail.com> ip: 209.85.216.45, mailfrom: ankur.tyagi85@gmail.com) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi <ankur.tyagi85@gmail.com> Subject: [oe][meta-networking][wrynose][PATCH 7/11] zeroconf: ignore CVEs Date: Wed, 14 Oct 2026 23:22:13 +1300 Message-ID: <20261014102218.880640-7-ankur.tyagi85@gmail.com> In-Reply-To: <20261014102218.880640-1-ankur.tyagi85@gmail.com> References: <20261014102218.880640-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[meta-oe,wrynose,1/11] xdg-dbus-proxy: upgrade 0.1.7 -> 0.1.9 \| expand [meta-oe,wrynose,1/11] xdg-dbus-proxy: upgrade 0.1.7 -> 0.1.9 [meta-python,wrynose,2/11] python3-tzdata: upgrade 2026.4 -> 2026.5 [meta-webserver,wrynose,3/11] swagger-ui: upgrade 5.32.14 -> 5.32.15 [meta-python,wrynose,4/11] python3-django: upgrade 5.2.17 -> 5.2.18 [meta-python,wrynose,5/11] python3-django: upgrade 6.0.8 -> 6.0.9 [meta-networking,wrynose,6/11] tinyproxy: patch CVE-2026-54388 [meta-networking,wrynose,7/11] zeroconf: ignore CVEs [meta-oe,wrynose,8/11] tmate: patch CVE-2026-4751 [meta-oe,wrynose,9/11] udisks2: patch CVE-2026-7867 [meta-oe,wrynose,10/11] libspdm: upgrade 3.8.2 -> 3.8.3 [meta-networking,wrynose,11/11] postfix: upgrade 3.10.13 -> 3.10.14

Message ID

20261014102218.880640-7-ankur.tyagi85@gmail.com

State

New

Headers

From: ankur.tyagi85@gmail.com
To: openembedded-devel@lists.openembedded.org
Cc: Ankur Tyagi <ankur.tyagi85@gmail.com>
Subject: [oe][meta-networking][wrynose][PATCH 7/11] zeroconf: ignore CVEs
Date: Wed, 14 Oct 2026 23:22:13 +1300
Message-ID: <20261014102218.880640-7-ankur.tyagi85@gmail.com>
In-Reply-To: <20261014102218.880640-1-ankur.tyagi85@gmail.com>
References: <20261014102218.880640-1-ankur.tyagi85@gmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[meta-oe,wrynose,1/11] xdg-dbus-proxy: upgrade 0.1.7 -> 0.1.9 | expand

Commit Message

Ankur Tyagi Oct. 14, 2026, 10:22 a.m. UTC

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-47180
https://nvd.nist.gov/vuln/detail/cve-2026-47183
https://nvd.nist.gov/vuln/detail/cve-2026-47184
https://nvd.nist.gov/vuln/detail/cve-2026-48045
https://nvd.nist.gov/vuln/detail/cve-2026-48487

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 meta-networking/recipes-protocols/zeroconf/zeroconf_0.9.bb | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/meta-networking/recipes-protocols/zeroconf/zeroconf_0.9.bb b/meta-networking/recipes-protocols/zeroconf/zeroconf_0.9.bb
index cb26699212..a9c19cb38f 100644
--- a/meta-networking/recipes-protocols/zeroconf/zeroconf_0.9.bb
+++ b/meta-networking/recipes-protocols/zeroconf/zeroconf_0.9.bb
@@ -35,3 +35,9 @@  do_install () {
     install -c -m 755 ${UNPACKDIR}/debian-zeroconf ${D}${sysconfdir}/network/if-up.d/zeroconf
     install -c ${UNPACKDIR}/zeroconf-default ${D}${sysconfdir}/default/zeroconf
 }
+
+CVE_STATUS[CVE-2026-47180] = "cpe-incorrect: this vulnerability is for Python Zeroconf library"
+CVE_STATUS[CVE-2026-47183] = "cpe-incorrect: this vulnerability is for Python Zeroconf library"
+CVE_STATUS[CVE-2026-47184] = "cpe-incorrect: this vulnerability is for Python Zeroconf library"
+CVE_STATUS[CVE-2026-48045] = "cpe-incorrect: this vulnerability is for Python Zeroconf library"
+CVE_STATUS[CVE-2026-48487] = "cpe-incorrect: this vulnerability is for Python Zeroconf library"

[meta-networking,wrynose,7/11] zeroconf: ignore CVEs

Commit Message

Patch