mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-06-13 17:39:57 +00:00
ndpi: ignore CVE-2025-25066
Details https://nvd.nist.gov/vuln/detail/CVE-2025-25066 CVE was fixed by [1] but the change [2] which introduced CVE was not present this version (4.2). $ git tag --no-contains b9348e9 | grep 4.2 4.2 [1] https://github.com/ntop/nDPI/commit/678697b5eb6c3caa5dd5f8cccfe9eed8d13b94bb [2] https://github.com/ntop/nDPI/commit/b9348e9d6e0e754c4b17661c643ca258f1540ca1 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
This commit is contained in:
@@ -26,3 +26,5 @@ do_configure:prepend() {
|
||||
EXTRA_OEMAKE = " \
|
||||
libdir=${libdir} \
|
||||
"
|
||||
|
||||
CVE_STATUS[CVE-2025-25066] = "cpe-incorrect: Current version (4.2) is not affected."
|
||||
|
||||
Reference in New Issue
Block a user