[meta-oe,whinlatter,12/15] ndpi: ignore CVE-2025-25066

Message ID	20260202211401.1287664-12-skandigraun@gmail.com
State	Under Review
Delegated to:	Anuj Mittal
Headers	show Return-Path: <skandigraun@gmail.com> ip: 209.85.221.44, mailfrom: skandigraun@gmail.com) From: Gyorgy Sarvari <skandigraun@gmail.com> To: openembedded-devel@lists.openembedded.org Subject: [meta-oe][whinlatter][PATCH 12/15] ndpi: ignore CVE-2025-25066 Date: Mon, 2 Feb 2026 22:13:58 +0100 Message-ID: <20260202211401.1287664-12-skandigraun@gmail.com> In-Reply-To: <20260202211401.1287664-1-skandigraun@gmail.com> References: <20260202211401.1287664-1-skandigraun@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[meta-oe,whinlatter,01/15] fontforge: patch CVE-2025-15279 \| expand [meta-oe,whinlatter,01/15] fontforge: patch CVE-2025-15279 [meta-oe,whinlatter,02/15] fontforge: patch CVE-2025-15275 [meta-oe,whinlatter,03/15] fontforge: patch CVE-2025-15269 [meta-oe,whinlatter,04/15] fontforge: patch CVE-2025-15270 [meta-gnome,whinlatter,05/15] gimp: update 3.0.6 -> 3.0.8 [meta-gnome,whinlatter,06/15] gimp: mark CVE-2025-15059 patched [meta-oe,whinlatter,07/15] gpsd: patch CVE-2025-67268 [meta-oe,whinlatter,08/15] gpsd: patch CVE-2025-67269 [meta-oe,whinlatter,09/15] imagemagick: upgrade 7.1.2-12 -> 7.1.2-13 [meta-oe,whinlatter,10/15] libcdio: patch CVE-2024-36600 [meta-oe,whinlatter,11/15] libcupsfilters: patch CVE-2025-64503 [meta-oe,whinlatter,12/15] ndpi: ignore CVE-2025-25066 [meta-oe,whinlatter,13/15] nodejs: upgrade 22.21.1 -> 22.22.0 [meta-networking,whinlatter,14/15] ez-ipupdate: patch CVE-2003-0887 [meta-networking,whinlatter,15/15] proftpd: ignore CVE-2021-47865

Message ID

20260202211401.1287664-12-skandigraun@gmail.com

State

Under Review

Delegated to:

Anuj Mittal

Headers

From: Gyorgy Sarvari <skandigraun@gmail.com>
To: openembedded-devel@lists.openembedded.org
Subject: [meta-oe][whinlatter][PATCH 12/15] ndpi: ignore CVE-2025-25066
Date: Mon,  2 Feb 2026 22:13:58 +0100
Message-ID: <20260202211401.1287664-12-skandigraun@gmail.com>
In-Reply-To: <20260202211401.1287664-1-skandigraun@gmail.com>
References: <20260202211401.1287664-1-skandigraun@gmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[meta-oe,whinlatter,01/15] fontforge: patch CVE-2025-15279 | expand

Commit Message

Gyorgy Sarvari Feb. 2, 2026, 9:13 p.m. UTC

Details: https://nvd.nist.gov/vuln/detail/CVE-2025-25066

The vulnerable code was introduced in version 4.12[1], and
the recipe version is not vulnerable yet. Due to this,
ignore this CVE.

[1]: https://github.com/ntop/nDPI/commit/b9348e9d6e0e754c4b17661c643ca258f1540ca1

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
---
 meta-networking/recipes-support/ntopng/ndpi_4.2.bb | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/meta-networking/recipes-support/ntopng/ndpi_4.2.bb b/meta-networking/recipes-support/ntopng/ndpi_4.2.bb
index f0175167a4..ae6efa802e 100644
--- a/meta-networking/recipes-support/ntopng/ndpi_4.2.bb
+++ b/meta-networking/recipes-support/ntopng/ndpi_4.2.bb
@@ -13,7 +13,6 @@  SRC_URI = "git://github.com/ntop/nDPI.git;branch=4.2-stable;protocol=https \
            file://0001-autogen.sh-not-generate-configure.patch \
            "
 
-
 inherit autotools-brokensep pkgconfig
 
 CPPFLAGS += "${SELECTED_OPTIMIZATION}"
@@ -25,3 +24,5 @@  do_configure:prepend() {
 EXTRA_OEMAKE = " \
     libdir=${libdir} \
 "
+
+CVE_STATUS[CVE-2025-25066] = "cpe-incorrect: Version 4.2 is not vulnerable yet"

[meta-oe,whinlatter,12/15] ndpi: ignore CVE-2025-25066

Commit Message

Patch