From 3be6d57c67222b1fe0b526185a2a3c4ab16c4a9f Mon Sep 17 00:00:00 2001 From: Ninette Adhikari Date: Mon, 29 Apr 2024 17:12:24 +0200 Subject: sthttpd: Update status for CVE-2017-10671 Current version 2.27.1 is not affected by the issue. Affected versions: Up to (excl.) 2.27.1 Signed-off-by: Ninette Adhikari Signed-off-by: Khem Raj --- meta-webserver/recipes-httpd/sthttpd/sthttpd_2.27.1.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-webserver/recipes-httpd/sthttpd/sthttpd_2.27.1.bb b/meta-webserver/recipes-httpd/sthttpd/sthttpd_2.27.1.bb index b40b14851..601ec7bcd 100644 --- a/meta-webserver/recipes-httpd/sthttpd/sthttpd_2.27.1.bb +++ b/meta-webserver/recipes-httpd/sthttpd/sthttpd_2.27.1.bb @@ -57,3 +57,5 @@ SYSTEMD_SERVICE:${PN} = "thttpd.service" FILES:${PN} += "${SRV_DIR}" FILES:${PN}-dbg += "${SRV_DIR}/cgi-bin/.debug" + +CVE_STATUS[CVE-2017-10671] = "fixed-version: No action required. The current version (2.27.1) is not affected by the CVE." -- cgit v1.2.3-54-g00ecf