[meta-webserver,3/6] cockpit: mark CVE-2024-2947 fixed

Message ID	20261112071348.4144113-3-ankur.tyagi85@gmail.com
State	New
Headers	show Received: from mail-pj1-f54.google.com (mail-pj1-f54.google.com [209.85.216.54]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8300.1794467643448703086 for <openembedded-devel@lists.openembedded.org>; Wed, 11 Nov 2026 23:14:03 -0800 ip: 209.85.216.54, mailfrom: ankur.tyagi85@gmail.com) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi <ankur.tyagi85@gmail.com> Subject: [oe][meta-webserver][PATCH 3/6] cockpit: mark CVE-2024-2947 fixed Date: Thu, 12 Nov 2026 20:13:45 +1300 Message-ID: <20261112071348.4144113-3-ankur.tyagi85@gmail.com> In-Reply-To: <20261112071348.4144113-1-ankur.tyagi85@gmail.com> References: <20261112071348.4144113-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="utf-8"
Series	[meta-oe,1/6] 7zip: upgrade 26.05 -> 26.06 \| expand [meta-oe,1/6] 7zip: upgrade 26.05 -> 26.06 [meta-oe,2/6] apitrace: patch CVE-2026-126050 [meta-webserver,3/6] cockpit: mark CVE-2024-2947 fixed [meta-oe,4/6] brotli: set CVE_PRODUCT to "google:brotli" [meta-networking,5/6] tinyproxy: patch CVE-2026-125371 [meta-oe,6/6] mpv: patch CVE-2026-123095

Message ID

20261112071348.4144113-3-ankur.tyagi85@gmail.com

State

New

Headers

From: ankur.tyagi85@gmail.com
To: openembedded-devel@lists.openembedded.org
Cc: Ankur Tyagi <ankur.tyagi85@gmail.com>
Subject: [oe][meta-webserver][PATCH 3/6] cockpit: mark CVE-2024-2947 fixed
Date: Thu, 12 Nov 2026 20:13:45 +1300
Message-ID: <20261112071348.4144113-3-ankur.tyagi85@gmail.com>
In-Reply-To: <20261112071348.4144113-1-ankur.tyagi85@gmail.com>
References: <20261112071348.4144113-1-ankur.tyagi85@gmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="utf-8"

Series

[meta-oe,1/6] 7zip: upgrade 26.05 -> 26.06 | expand

Commit Message

Ankur Tyagi Nov. 12, 2026, 7:13 a.m. UTC

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

Commit[1] also identified by Debian[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2024-2947

[1]https://github.com/cockpit-project/cockpit/commit/9c4cc9b6df632082538b53bdc8ee9ec1c5cad4da
[2]https://security-tracker.debian.org/tracker/CVE-2024-2947

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 meta-webserver/recipes-webadmin/cockpit/cockpit_366.1.bb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/meta-webserver/recipes-webadmin/cockpit/cockpit_366.1.bb b/meta-webserver/recipes-webadmin/cockpit/cockpit_366.1.bb
index e12cabcd98..3aa1f155e7 100644
--- a/meta-webserver/recipes-webadmin/cockpit/cockpit_366.1.bb
+++ b/meta-webserver/recipes-webadmin/cockpit/cockpit_366.1.bb
@@ -202,3 +202,4 @@  do_install:append() {
 }
 
 CVE_PRODUCT = "cockpit-project:cockpit"
+CVE_STATUS[CVE-2024-2947] = "fixed-version: fixed since v314"

[meta-webserver,3/6] cockpit: mark CVE-2024-2947 fixed

Commit Message

Patch