[12/82] dovecot: ignore already fixed CVEs

Message ID	f4785e05f877f9bdf636cab62af112ccd25b85c6.1791945956.git.ankur.tyagi85@gmail.com
State	New
Headers	show Return-Path: <ankur.tyagi85@gmail.com> ip: 209.85.214.180, mailfrom: ankur.tyagi85@gmail.com) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Subject: [PATCH 12/82] dovecot: ignore already fixed CVEs Date: Thu, 15 Oct 2026 18:41:00 +1300 Message-ID: <f4785e05f877f9bdf636cab62af112ccd25b85c6.1791945956.git.ankur.tyagi85@gmail.com> In-Reply-To: <cover.1791945956.git.ankur.tyagi85@gmail.com> References: <cover.1791945956.git.ankur.tyagi85@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[01/82] readme: update maintainer \| expand [01/82] readme: update maintainer [02/82] Revert "libpwquality: remove recipe (moved to oe-core)" [03/82] pcsc-lite: create pcscd user and group also via useradd [04/82] Revert "gnome-shell-extensions: upgrade 50.3 -> 51.0" [05/82] Revert "gnome-shell: upgrade 50.4 -> 51.0" [06/82] Revert "mutter: upgrade 50.4 -> 51.0" [07/82] libwebsockets: patch CVE-2026-19773 [08/82] libwebsockets: patch CVE-2026-78161 [09/82] nginx: set status for CVE-2026-90439 [10/82] capnproto: ignore CVE-2026-59704 [11/82] civetweb: ignore CVE-2026-5789 [12/82] dovecot: ignore already fixed CVEs [13/82] eject: ignore CVE-2026-28065 [14/82] gpsd: patch CVE-2026-58459 [15/82] bcc: correct CVE_PRODUCT mapping [16/82] dool: patch CVE-2026-56651 [17/82] dool: patch CVE-2026-56652 [18/82] haveged: ignore CVE-2026-41054 [19/82] gpm: ignore CVE-2025-4558 [20/82] gerbera: ignore CVE-2025-23386 [21/82] libde265: patch CVE-2026-49295 [22/82] libde265: patch CVE-2026-49337 [23/82] libde265: patch CVE-2026-49346 [24/82] libde265: patch CVE-2026-54240 and CVE-2026-54241 [25/82] hdf5: patch CVE-2026-17572 [26/82] hdf5: patch CVE-2026-17573 [27/82] hdf5: patch CVE-2026-17574 [28/82] hdf5: patch CVE-2026-19025 [29/82] iniparser: mark CVE-2025-0633 pached [30/82] jq: ignore already fixed CVEs [31/82] libiec61850: mark CVE-2024-45969 patched [32/82] libnfs: patch CVE-2026-53689 [33/82] libnfs: patch CVE-2026-57918 [34/82] libssh: ignore CVE-2025-14821 [35/82] libssh: mark CVEs patched [36/82] libssh: ignore CVE-2026-59851 [37/82] miniupnpd: patch CVE-2026-107159 [38/82] libyang: patch CVE-2026-41401 [39/82] tinyproxy: patch CVE-2026-31842 [40/82] tinyproxy: patch CVE-2026-54387 [41/82] tinyproxy: patch CVE-2026-55202 [42/82] wolfssl: mark CVEs patched [43/82] python3-gunicorn: mark CVE-2024-1135 patched [44/82] pgpool2: upgrade 4.7.2 -> 4.7.3 [45/82] smarty: upgrade 5.8.4 -> 5.8.5 [46/82] python3-astroid: upgrade 4.3.2 -> 4.3.3 [47/82] python3-django: upgrade 6.0.8 -> 6.0.9 [48/82] python3-django: upgrade 5.2.17 -> 5.2.18 [49/82] python3-tzdata: upgrade 2026.4 -> 2026.5 [50/82] python3-werkzeug: upgrade 3.1.8 -> 3.1.9 [51/82] python3-zeroconf: upgrade 0.151.3 -> 0.151.5 [52/82] swagger-ui: upgrade 5.33.0 -> 5.33.1 [53/82] openvpn: ignore CVE-2026-84256 [54/82] openvpn: patch CVE-2026-88964 [55/82] openvpn: patch CVE-2026-84790 [56/82] python3-eventlet: mark CVE-2023-29483 fixed [57/82] cjson: patch CVE-2026-87933 [58/82] smarty: mark CVE-2026-82531 patched [59/82] ntopng: patch CVE-2026-84990 [60/82] ntopng: patch CVE-2026-86090 and CVE-2026-86091 [61/82] sngrep: patch CVE-2026-90558 [62/82] strongswan: patch CVE-2026-78123 [63/82] strongswan: patch CVE-2026-78124 [64/82] strongswan: patch CVE-2026-78126 [65/82] strongswan: patch CVE-2026-78127 [66/82] strongswan: patch CVE-2026-78129 [67/82] strongswan: patch CVE-2026-78133 [68/82] strongswan: patch CVE-2026-78131 [69/82] strongswan: patch CVE-2026-78130 [70/82] strongswan: patch CVE-2026-78132 [71/82] strongswan: patch CVE-2026-78135 [72/82] strongswan: patch CVE-2026-78134 [73/82] tesseract: patch CVE-2026-88052 [74/82] tesseract: patch CVE-2026-88048 [75/82] tesseract: patch CVE-2026-88049 [76/82] tesseract: patch CVE-2026-88050 [77/82] tesseract: patch CVE-2026-88047 [78/82] tesseract: patch CVE-2026-88051 [79/82] tesseract: patch CVE-2026-88054 [80/82] gpsd: patch CVE-2026-60122 [81/82] apache2: fix build with OpenSSL 4 [82/82] lvgl-demo-fb: fix SRCREV

Message ID

f4785e05f877f9bdf636cab62af112ccd25b85c6.1791945956.git.ankur.tyagi85@gmail.com

State

New

Headers

From: ankur.tyagi85@gmail.com
To: openembedded-devel@lists.openembedded.org
Subject: [PATCH 12/82] dovecot: ignore already fixed CVEs
Date: Thu, 15 Oct 2026 18:41:00 +1300
Message-ID: 
 <f4785e05f877f9bdf636cab62af112ccd25b85c6.1791945956.git.ankur.tyagi85@gmail.com>
In-Reply-To: <cover.1791945956.git.ankur.tyagi85@gmail.com>
References: <cover.1791945956.git.ankur.tyagi85@gmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[01/82] readme: update maintainer | expand

Commit Message

Ankur Tyagi Oct. 15, 2026, 5:41 a.m. UTC

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

Upstream has confirmed that these vulnerabilities are fixed,
and Debian has also identified the relevant commits:

CVE-2025-59028: https://security-tracker.debian.org/tracker/CVE-2025-59028
CVE-2025-59032: https://security-tracker.debian.org/tracker/CVE-2025-59032
CVE-2026-27859: https://security-tracker.debian.org/tracker/CVE-2026-27859
CVE-2026-27851: https://security-tracker.debian.org/tracker/CVE-2026-27851
CVE-2026-33603: https://security-tracker.debian.org/tracker/CVE-2026-33603
CVE-2026-40016: https://security-tracker.debian.org/tracker/CVE-2026-40016
CVE-2026-40020: https://security-tracker.debian.org/tracker/CVE-2026-40020
CVE-2026-42006: https://security-tracker.debian.org/tracker/CVE-2026-42006

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit 86a9ad852a7180edf8b03fca7d0a69e9f1d9e550)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 meta-networking/recipes-support/dovecot/dovecot_2.4.5.bb | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/meta-networking/recipes-support/dovecot/dovecot_2.4.5.bb b/meta-networking/recipes-support/dovecot/dovecot_2.4.5.bb
index 993453eaa3..06e6ee39fa 100644
--- a/meta-networking/recipes-support/dovecot/dovecot_2.4.5.bb
+++ b/meta-networking/recipes-support/dovecot/dovecot_2.4.5.bb
@@ -89,3 +89,11 @@  CVE_STATUS[CVE-2026-0394] = "fixed-version: fixed since v2.4.1"
 CVE_STATUS[CVE-2026-24031] = "fixed-version: fixed since v2.4.3"
 CVE_STATUS[CVE-2026-27855] = "fixed-version: fixed since v2.4.3"
 CVE_STATUS[CVE-2026-27860] = "fixed-version: fixed since v2.4.3"
+CVE_STATUS[CVE-2025-59028] = "fixed-version: fixed since v2.4.3"
+CVE_STATUS[CVE-2025-59032] = "fixed-version: fixed since v2.4.3"
+CVE_STATUS[CVE-2026-27859] = "fixed-version: fixed since v2.4.3"
+CVE_STATUS[CVE-2026-27851] = "fixed-version: fixed in v2.4.4"
+CVE_STATUS[CVE-2026-33603] = "fixed-version: fixed in v2.4.4"
+CVE_STATUS[CVE-2026-40016] = "fixed-version: fixed in v2.4.4"
+CVE_STATUS[CVE-2026-40020] = "fixed-version: fixed in v2.4.4"
+CVE_STATUS[CVE-2026-42006] = "fixed-version: fixed in v2.4.4"

[12/82] dovecot: ignore already fixed CVEs

Commit Message

Patch