From 1045aca10660ed7039ae18f63260ef8d4a67f29d Mon Sep 17 00:00:00 2001 From: Peter Marko Date: Sat, 22 Aug 2026 22:21:44 +0200 Subject: [PATCH] gnutls: set status for CVE-2026-1584 Set status per [1]. [1] https://security-tracker.debian.org/tracker/CVE-2026-1584 (From OE-Core rev: a04716f2209d4d374d7e42388776917fb4179adc) Signed-off-by: Peter Marko Signed-off-by: Yoann Congal Signed-off-by: Richard Purdie --- meta/recipes-support/gnutls/gnutls_3.8.4.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-support/gnutls/gnutls_3.8.4.bb b/meta/recipes-support/gnutls/gnutls_3.8.4.bb index 676c5c6f94..0eabc517ce 100644 --- a/meta/recipes-support/gnutls/gnutls_3.8.4.bb +++ b/meta/recipes-support/gnutls/gnutls_3.8.4.bb @@ -129,3 +129,4 @@ pkg_postinst_ontarget:${PN}-fips () { } CVE_STATUS[CVE-2026-3832] = "fixed-version: vulnerable multi-record OCSP response handling was introduced in 3.8.8 and is not present in 3.8.4" +CVE_STATUS[CVE-2026-1584] = "fixed-version: vulnerable code not present, introduced with 3.8.11"