diff options
| author | Gyorgy Sarvari <skandigraun@gmail.com> | 2026-04-06 14:03:10 +0200 |
|---|---|---|
| committer | Khem Raj <khem.raj@oss.qualcomm.com> | 2026-04-06 09:46:30 -0700 |
| commit | e99441755f5f0675d42b534728471674fd488d92 (patch) | |
| tree | 60df99ac0aaa2305c435af62830090bf817bf7bd /meta-networking | |
| parent | 34628ad546e1f2ff113881199cd509074e44c8e6 (diff) | |
| download | meta-openembedded-e99441755f5f0675d42b534728471674fd488d92.tar.gz | |
dovecot: ignore already fixed CVEs
The following CVEs are fixed in the current version already,
however they are tracked without version info.
Upstream has confirmed[1] that these vulnerabilities are fixed,
and Debian has also identified the relevant commits:
CVE-2025-30189: https://security-tracker.debian.org/tracker/CVE-2025-30189
CVE-2026-0394: https://security-tracker.debian.org/tracker/CVE-2026-0394
CVE-2026-24031: https://security-tracker.debian.org/tracker/CVE-2026-24031
CVE-2026-27855: https://security-tracker.debian.org/tracker/CVE-2026-27855
CVE-2026-27860: https://security-tracker.debian.org/tracker/CVE-2026-27860
[1]: https://seclists.org/fulldisclosure/2026/Mar/13
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Diffstat (limited to 'meta-networking')
| -rw-r--r-- | meta-networking/recipes-support/dovecot/dovecot_2.4.3.bb | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/meta-networking/recipes-support/dovecot/dovecot_2.4.3.bb b/meta-networking/recipes-support/dovecot/dovecot_2.4.3.bb index a8930979ea..10ca595029 100644 --- a/meta-networking/recipes-support/dovecot/dovecot_2.4.3.bb +++ b/meta-networking/recipes-support/dovecot/dovecot_2.4.3.bb | |||
| @@ -81,3 +81,8 @@ FILES:${PN}-dev += "${libdir}/dovecot/libdovecot*.so" | |||
| 81 | FILES:${PN}-dbg += "${libdir}/dovecot/*/.debug" | 81 | FILES:${PN}-dbg += "${libdir}/dovecot/*/.debug" |
| 82 | 82 | ||
| 83 | CVE_STATUS[CVE-2016-4983] = "not-applicable-platform: Affects only postinstall script on specific distribution." | 83 | CVE_STATUS[CVE-2016-4983] = "not-applicable-platform: Affects only postinstall script on specific distribution." |
| 84 | CVE_STATUS[CVE-2025-59031] = "fixed-version: fixed since v2.4.2" | ||
| 85 | CVE_STATUS[CVE-2026-0394] = "fixed-version: fixed since v2.4.1" | ||
| 86 | CVE_STATUS[CVE-2026-24031] = "fixed-version: fixed since v2.4.3" | ||
| 87 | CVE_STATUS[CVE-2026-27855] = "fixed-version: fixed since v2.4.3" | ||
| 88 | CVE_STATUS[CVE-2026-27860] = "fixed-version: fixed since v2.4.3" | ||