| Message ID | 20251017115651.1509368-1-ankur.tyagi85@gmail.com |
|---|---|
| State | New |
| Headers | show |
| Series | [meta-networking,scarthgap] ndpi: ignore CVE-2025-25066 | expand |
diff --git a/meta-networking/recipes-support/ntopng/ndpi_4.2.bb b/meta-networking/recipes-support/ntopng/ndpi_4.2.bb index 13c3398c2b..d768f85d31 100644 --- a/meta-networking/recipes-support/ntopng/ndpi_4.2.bb +++ b/meta-networking/recipes-support/ntopng/ndpi_4.2.bb @@ -26,3 +26,5 @@ do_configure:prepend() { EXTRA_OEMAKE = " \ libdir=${libdir} \ " + +CVE_STATUS[CVE-2025-25066] = "cpe-incorrect: Current version (4.2) is not affected."
Details https://nvd.nist.gov/vuln/detail/CVE-2025-25066 CVE was fixed by [1] but the change [2] which introduced CVE was not present this version (4.2). $ git tag --no-contains b9348e9 | grep 4.2 4.2 [1] https://github.com/ntop/nDPI/commit/678697b5eb6c3caa5dd5f8cccfe9eed8d13b94bb [2] https://github.com/ntop/nDPI/commit/b9348e9d6e0e754c4b17661c643ca258f1540ca1 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> --- meta-networking/recipes-support/ntopng/ndpi_4.2.bb | 2 ++ 1 file changed, 2 insertions(+)