mirrors/meta-openembedded
1
0
Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-07-24 06:57:10 +00:00
Code Issues Projects Releases Wiki Activity

tcpdump: set status for CVE-2024-2397

Browse Source 
This CVE is fixed with commit [1] included in release 4.99.5.
It is a cherry-pick of commit [2] mentioned in NVD report [3].

cvelistV5 and FKIE list hash as fixed version ("lessThan": "b9811ef"),
which causes a false positive thus needs to be handled explicitly.

[1] https://github.com/the-tcpdump-group/tcpdump/commit/e9bff173f9833b5532f3b6dce8c049e955140169
[2] https://github.com/the-tcpdump-group/tcpdump/commit/b9811ef5bb1b7d45a90e042f81f3aaf233c8bcb2
[3] https://nvd.nist.gov/vuln/detail/CVE-2024-2397

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
This commit is contained in:
Peter Marko
2026-07-20 21:27:31 +02:00
committed by Khem Raj
parent b465d9cf61
commit bb4529d9c1
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
meta-networking/recipes-support/tcpdump/tcpdump_4.99.6.bb
+2
View File
@@ -52,3 +52,5 @@ do_install:append() {
do_compile_ptest() {
oe_runmake buildtest-TESTS
}
CVE_STATUS[CVE-2024-2397] = "fixed-version: Fixed since 4.99.5"