From 1c65291a77d84b10a73868da2a39443b46ca3025 Mon Sep 17 00:00:00 2001 From: Ankur Tyagi Date: Sat, 18 Oct 2025 00:56:51 +1300 Subject: [PATCH] ndpi: ignore CVE-2025-25066 Details https://nvd.nist.gov/vuln/detail/CVE-2025-25066 CVE was fixed by [1] but the change [2] which introduced CVE was not present this version (4.2). $ git tag --no-contains b9348e9 | grep 4.2 4.2 [1] https://github.com/ntop/nDPI/commit/678697b5eb6c3caa5dd5f8cccfe9eed8d13b94bb [2] https://github.com/ntop/nDPI/commit/b9348e9d6e0e754c4b17661c643ca258f1540ca1 Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal --- meta-networking/recipes-support/ntopng/ndpi_4.2.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-networking/recipes-support/ntopng/ndpi_4.2.bb b/meta-networking/recipes-support/ntopng/ndpi_4.2.bb index 13c3398c2b..d768f85d31 100644 --- a/meta-networking/recipes-support/ntopng/ndpi_4.2.bb +++ b/meta-networking/recipes-support/ntopng/ndpi_4.2.bb @@ -26,3 +26,5 @@ do_configure:prepend() { EXTRA_OEMAKE = " \ libdir=${libdir} \ " + +CVE_STATUS[CVE-2025-25066] = "cpe-incorrect: Current version (4.2) is not affected."