From 98e04f2bb7ba00dbb8b2c88f5d2874ca6c096ea3 Mon Sep 17 00:00:00 2001 From: Ankur Tyagi Date: Tue, 20 Oct 2026 07:33:59 +1300 Subject: [PATCH] ncp: ignore CVE-2025-14577 and CVE-2026-35087 Details: https://nvd.nist.gov/vuln/detail/cve-2025-14577 https://nvd.nist.gov/vuln/detail/cve-2026-35087 (cherry picked from commit 1bd5d1a7a69aa04d6339ba7d5ef2cd8b83ec25a4) Signed-off-by: Ankur Tyagi Signed-off-by: Khem Raj --- meta-networking/recipes-support/ncp/ncp_1.2.4.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-networking/recipes-support/ncp/ncp_1.2.4.bb b/meta-networking/recipes-support/ncp/ncp_1.2.4.bb index ec6d918744..19fb258aec 100644 --- a/meta-networking/recipes-support/ncp/ncp_1.2.4.bb +++ b/meta-networking/recipes-support/ncp/ncp_1.2.4.bb @@ -29,3 +29,6 @@ do_install() { } BBCLASSEXTEND = "native nativesdk" + +CVE_STATUS[CVE-2025-14577] = "cpe-incorrect: This vulnerability is for Slican NCP" +CVE_STATUS[CVE-2026-35087] = "cpe-incorrect: This vulnerability is for Slican NCP"