[meta-oe][scarthgap][PATCH] hostapd: set status for CVE-2026-58374

Peter Marko <[email protected]>
Newsgroups org.openembedded.lists.openembedded-devel
Message-ID <[email protected]>
From: Peter Marko <[email protected]>

As desctibed in [1], vulnerable code is not yet present in 2.10.

[1] https://security-tracker.debian.org/tracker/CVE-2026-58374

Signed-off-by: Peter Marko <[email protected]>
---
 meta-oe/recipes-connectivity/hostapd/hostapd_2.10.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta-oe/recipes-connectivity/hostapd/hostapd_2.10.bb b/meta-oe/recipes-connectivity/hostapd/hostapd_2.10.bb
index fec54f8a47..74fe958e60 100644
--- a/meta-oe/recipes-connectivity/hostapd/hostapd_2.10.bb
+++ b/meta-oe/recipes-connectivity/hostapd/hostapd_2.10.bb
@@ -63,3 +63,5 @@ do_install() {
 }
 
 CONFFILES:${PN} += "${sysconfdir}/hostapd.conf"
+
+CVE_STATUS[CVE-2026-58374] = "fixed-version: EHT/IEEE 802.11be/Wi-Fi 7 support introduced in v2.11"
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.