| Message ID | 20251013184740.481753-1-skandigraun@gmail.com |
|---|---|
| State | Under Review |
| Headers | show |
| Series | [meta-networking] dovecot: ignore CVE-2016-4983 (again) | expand |
diff --git a/meta-networking/recipes-support/dovecot/dovecot_2.4.1-4.bb b/meta-networking/recipes-support/dovecot/dovecot_2.4.1-4.bb index a06fd45199..5894c76bac 100644 --- a/meta-networking/recipes-support/dovecot/dovecot_2.4.1-4.bb +++ b/meta-networking/recipes-support/dovecot/dovecot_2.4.1-4.bb @@ -75,3 +75,5 @@ FILES:${PN} += "${libdir}/dovecot/*plugin.so \ FILES:${PN}-staticdev += "${libdir}/dovecot/*/*.a" FILES:${PN}-dev += "${libdir}/dovecot/libdovecot*.so" FILES:${PN}-dbg += "${libdir}/dovecot/*/.debug" + +CVE_STATUS[CVE-2016-4983] = "not-applicable-platform: Affects only postinstall script on specific distribution."
I removed the CVE_STATUS setting for CVE-2016-4983 when this recipe was updated to 2.4.1-4 - but that was a mistake, the CVE database considers (incorrectly) even the latest version as vulnerable. Revert that mistake by adding back the correct CVE_STATUS to the recipe. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> --- meta-networking/recipes-support/dovecot/dovecot_2.4.1-4.bb | 2 ++ 1 file changed, 2 insertions(+)