diff mbox series

[meta-networking,wrynose,5/6] tcpdump: set status for CVE-2024-2397

Message ID 20260720192809.28277-5-peter.marko@siemens.com
State New
Headers show
Series [meta-oe,wrynose,1/6] grpc: set status for CVE-2023-33953 and CVE-2024-37168 | expand

Commit Message

Marko, Peter July 20, 2026, 7:28 p.m. UTC 
From: Peter Marko <peter.marko@siemens.com>

This CVE is fixed with commit [1] included in release 4.99.5.
It is a cherry-pick of commit [2] mentioned in NVD report [3].

cvelistV5 and FKIE list hash as fixed version ("lessThan": "b9811ef"),
which causes a false positive thus needs to be handled explicitly.

[1] https://github.com/the-tcpdump-group/tcpdump/commit/e9bff173f9833b5532f3b6dce8c049e955140169
[2] https://github.com/the-tcpdump-group/tcpdump/commit/b9811ef5bb1b7d45a90e042f81f3aaf233c8bcb2
[3] https://nvd.nist.gov/vuln/detail/CVE-2024-2397

Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
 meta-networking/recipes-support/tcpdump/tcpdump_4.99.6.bb | 2 ++
 1 file changed, 2 insertions(+)
diff mbox series

Patch

diff --git a/meta-networking/recipes-support/tcpdump/tcpdump_4.99.6.bb b/meta-networking/recipes-support/tcpdump/tcpdump_4.99.6.bb
index f1bd32485c..af7e8b6ba4 100644
--- a/meta-networking/recipes-support/tcpdump/tcpdump_4.99.6.bb
+++ b/meta-networking/recipes-support/tcpdump/tcpdump_4.99.6.bb
@@ -52,3 +52,5 @@  do_install:append() {
 do_compile_ptest() {
     oe_runmake buildtest-TESTS
 }
+
+CVE_STATUS[CVE-2024-2397] = "fixed-version: Fixed since 4.99.5"