]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
xz: mark several CVEs as fixed
authorRoss Burton <ross.burton@arm.com>
Mon, 20 Apr 2026 19:07:47 +0000 (20:07 +0100)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Wed, 22 Apr 2026 22:26:34 +0000 (23:26 +0100)
commitcb3cfe2fa632eb81c09ca91d5d2e8c2bc218c19c
tree8dc255d2f2f1aeb98d76ed3a53929b51dc84b375
parentf82c02848cfe68b3b88b749f6932a6e21ff3c097
xz: mark several CVEs as fixed

- CVE-2024-47611 was fixed in 5.6.3 and is Windows-specific.
- CVE-2025-31115 was fixed in 5.8.1.
- CVE-2025-58058 is specific to the Go xz module, not this recipe.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-extended/xz/xz_5.8.2.bb