From 50cc0d11d4b10d38d7975e9fdcf184eb5ea210d5 Mon Sep 17 00:00:00 2001 From: Fiona Klute Date: Thu, 25 Jun 2026 19:09:38 +0200 Subject: [PATCH] package/util-linux: add missing UTIL_LINUX_IGNORE_CVES entry for CVE-2026-27456 Patch was added in 9998130badb6101cdf6f6da0bbd1228d79825b63, but no ignore entry. Signed-off-by: Fiona Klute --- package/util-linux/util-linux.mk | 3 +++ 1 file changed, 3 insertions(+) diff --git a/package/util-linux/util-linux.mk b/package/util-linux/util-linux.mk index 20bdcc5c3f..cfcd738bb5 100644 --- a/package/util-linux/util-linux.mk +++ b/package/util-linux/util-linux.mk @@ -37,6 +37,9 @@ UTIL_LINUX_LICENSE_FILES = README.licensing \ UTIL_LINUX_CPE_ID_VENDOR = kernel +# package/util-linux/0003-loopdev-use-openat2-RESOLVE_NO_SYMLINKS-for-backing-.patch +UTIL_LINUX_IGNORE_CVES += CVE-2026-27456 + # 0002-autotools-optionally-add-libpthread-to-uuid.pc.patch UTIL_LINUX_AUTORECONF = YES