summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAnkur Tyagi <ankur.tyagi85@gmail.com>2026-02-14 14:13:16 +1300
committerAnuj Mittal <anuj.mittal@oss.qualcomm.com>2026-02-25 13:00:40 +0530
commitc9662d5451f0a4ea1d8c5ca4247ed07927b373d7 (patch)
tree3f8a9cd2a15305dbb0789cc2e0d3f80f56f7413b
parentf243689cda24339af92d3b293e0138dafeb2e4e8 (diff)
downloadmeta-openembedded-c9662d5451f0a4ea1d8c5ca4247ed07927b373d7.tar.gz
dovecot: ignore CVE-2025-30189
Vulnerable versions are 2.4.0, 2.4.1 according to the full disclosure[1] Details: https://nvd.nist.gov/vuln/detail/CVE-2025-30189 [1] https://seclists.org/fulldisclosure/2025/Oct/29 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
-rw-r--r--meta-networking/recipes-support/dovecot/dovecot_2.3.21.1.bb1
1 files changed, 1 insertions, 0 deletions
diff --git a/meta-networking/recipes-support/dovecot/dovecot_2.3.21.1.bb b/meta-networking/recipes-support/dovecot/dovecot_2.3.21.1.bb
index 48e1e8a832..696257930a 100644
--- a/meta-networking/recipes-support/dovecot/dovecot_2.3.21.1.bb
+++ b/meta-networking/recipes-support/dovecot/dovecot_2.3.21.1.bb
@@ -73,3 +73,4 @@ FILES:${PN}-dev += "${libdir}/dovecot/libdovecot*.so"
73FILES:${PN}-dbg += "${libdir}/dovecot/*/.debug" 73FILES:${PN}-dbg += "${libdir}/dovecot/*/.debug"
74 74
75CVE_STATUS[CVE-2016-4983] = "not-applicable-platform: Affects only postinstall script on specific distribution." 75CVE_STATUS[CVE-2016-4983] = "not-applicable-platform: Affects only postinstall script on specific distribution."
76CVE_STATUS[CVE-2025-30189] = "cpe-incorrect: The current version (2.3.21.1) is not affected."