diff mbox series

[wrynose,7/8] ppp: set status for CVE-2020-15704

Message ID 20260927085936.114900-7-peter.marko@siemens.com
State New
Headers show
Series [wrynose,1/8] glibc: set status for CVE-2011-0536 and CVE-2025-0577 | expand

Commit Message

Peter Marko Sept. 27, 2026, 8:59 a.m. UTC 
From: Peter Marko <peter.marko@siemens.com>

New version of sbom-cve-check makes more torough version validation
and version strings with distro specific suffix is no longer accepted,
thus leaving some CVEs without version to compare (no-version-ranges).

Per [1] this is Ubuntu-specific issue.

[1] https://security-tracker.debian.org/tracker/CVE-2020-15704

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(From OE-Core rev: 1f875a76c3b5aca955f705163b07dd1fe20373be)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
 meta/recipes-connectivity/ppp/ppp_2.5.2.bb | 1 +
 1 file changed, 1 insertion(+)
diff mbox series

Patch

diff --git a/meta/recipes-connectivity/ppp/ppp_2.5.2.bb b/meta/recipes-connectivity/ppp/ppp_2.5.2.bb
index 37e223b4ab..698d6930eb 100644
--- a/meta/recipes-connectivity/ppp/ppp_2.5.2.bb
+++ b/meta/recipes-connectivity/ppp/ppp_2.5.2.bb
@@ -79,3 +79,4 @@  SUMMARY:${PN}-password = "Plugin for PPP to get passwords via a pipe"
 SUMMARY:${PN}-l2tp     = "Plugin for PPP for l2tp support"
 SUMMARY:${PN}-tools    = "Additional tools for the PPP package"
 
+CVE_STATUS[CVE-2020-15704] = "not-applicable-platform: specific to Ubuntu"