gnutls: set status for CVE-2026-1584

Set status per [1].

[1] https://security-tracker.debian.org/tracker/CVE-2026-1584

(From OE-Core rev: a04716f2209d4d374d7e42388776917fb4179adc)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Peter Marko
2026-08-22 22:21:44 +02:00
committed by Richard Purdie
parent bf5d6de552
commit 1045aca106

View File

@@ -129,3 +129,4 @@ pkg_postinst_ontarget:${PN}-fips () {
}
CVE_STATUS[CVE-2026-3832] = "fixed-version: vulnerable multi-record OCSP response handling was introduced in 3.8.8 and is not present in 3.8.4"
CVE_STATUS[CVE-2026-1584] = "fixed-version: vulnerable code not present, introduced with 3.8.11"