danvics/docling-studio
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

fix(ci): ignore CVE-2026-40393 (Mesa) with expiry — Debian has no backport (#190)

Browse source 
Refs #189
This commit is contained in:
Pier-Jean Malandrino 2026-04-27 17:22:15 +02:00 committed by GitHub
parent 636045e410
commit 679dbc975a
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 12 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
.trivyignore.yaml Normal file
View file

@ -0,0 +1,12 @@
vulnerabilities:
- id: CVE-2026-40393
paths:
- "usr/lib/x86_64-linux-gnu/libgbm.so.*"
- "usr/lib/x86_64-linux-gnu/dri/*"
- "usr/lib/x86_64-linux-gnu/libGLX_mesa.so.*"
- "usr/lib/x86_64-linux-gnu/libgallium-*.so"
statement: >-
Mesa OOB read (fix: Mesa 25.3.6 / 26.0.1). No Debian 13 backport available.
Pulled transitively by libgl1 (required by OpenCV/RapidOCR). Tracked in #189
with follow-up to drop libgl1 via opencv-python-headless.
expired_at: 2026-06-30