util-linux: set status for CVE-2026-3184

This is RedHat version-less CVE.
Per [1] this is fixed in 2.42-rc1.

[1] https://security-tracker.debian.org/tracker/CVE-2026-3184

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

diff --git a/meta/recipes-core/util-linux/util-linux.inc b/meta/recipes-core/util-linux/util-linux.inc
index 460b9964030f95fd9ff5e2cc34a31a7dae566966..9713c8b882563f9c52a74518705fadb0816debe3 100644 (file)
--- a/meta/recipes-core/util-linux/util-linux.inc
+++ b/meta/recipes-core/util-linux/util-linux.inc
@@ -22,3 +22,5 @@ SRC_URI = "${KERNELORG_MIRROR}/linux/utils/util-linux/v${MAJOR_VERSION}/util-lin
 SRC_URI[sha256sum] = "03a05d3adf9602ef128f2da05b84b3205ce60c351e5737c0370f74000679ce8a"
 
 CVE_PRODUCT = "util-linux"
+
+CVE_STATUS[CVE-2026-3184] = "fixed-version: Fixed since 2.42"