mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-06-14 05:49:57 +00:00
proftpd: set status of CVE-2001-0027
This ancient CVE [1] is unversioned ("*") in NVD DB.
"mod_sqlpw module in ProFTPD does not reset a cached password..."
Looking at history and changelog, the module was removed [2] around
the time when this CVE was published, likely as reaction to this CVE.
"mod_sqlpw.c, mod_mysql.c and mod_pgsql.c have been REMOVED from the
distribution. They are currently unmaintained and have numerous bugs."
Note: It was later re-introduced as mod_sql when it got fixed under
new maintainer.
[1] https://nvd.nist.gov/vuln/detail/CVE-2001-0027
[2] https://github.com/proftpd/proftpd/blob/v1.3.8b/NEWS#L3362
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 03a1b56bc7)
Adapted to Kirkstone (CVE_STATUS -> CVE_CHECK_IGNORE)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
This commit is contained in:
committed by
Gyorgy Sarvari
parent
71adc2f371
commit
6b7a0197f9
@@ -25,6 +25,9 @@ S = "${WORKDIR}/git"
|
||||
|
||||
inherit autotools-brokensep useradd update-rc.d systemd multilib_script
|
||||
|
||||
# fixed-version: version 1.2.0rc3 removed affected module
|
||||
CVE_CHECK_IGNORE += "CVE-2001-0027"
|
||||
|
||||
PACKAGECONFIG ??= "shadow \
|
||||
${@bb.utils.filter('DISTRO_FEATURES', 'ipv6 pam', d)} \
|
||||
static \
|
||||
|
||||
Reference in New Issue
Block a user