From bb4529d9c1487069310fbbf9296c15822b636969 Mon Sep 17 00:00:00 2001 From: Peter Marko Date: Mon, 20 Jul 2026 21:27:31 +0200 Subject: [PATCH] tcpdump: set status for CVE-2024-2397 This CVE is fixed with commit [1] included in release 4.99.5. It is a cherry-pick of commit [2] mentioned in NVD report [3]. cvelistV5 and FKIE list hash as fixed version ("lessThan": "b9811ef"), which causes a false positive thus needs to be handled explicitly. [1] https://github.com/the-tcpdump-group/tcpdump/commit/e9bff173f9833b5532f3b6dce8c049e955140169 [2] https://github.com/the-tcpdump-group/tcpdump/commit/b9811ef5bb1b7d45a90e042f81f3aaf233c8bcb2 [3] https://nvd.nist.gov/vuln/detail/CVE-2024-2397 Signed-off-by: Peter Marko Signed-off-by: Khem Raj --- meta-networking/recipes-support/tcpdump/tcpdump_4.99.6.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-networking/recipes-support/tcpdump/tcpdump_4.99.6.bb b/meta-networking/recipes-support/tcpdump/tcpdump_4.99.6.bb index f1bd32485c..af7e8b6ba4 100644 --- a/meta-networking/recipes-support/tcpdump/tcpdump_4.99.6.bb +++ b/meta-networking/recipes-support/tcpdump/tcpdump_4.99.6.bb @@ -52,3 +52,5 @@ do_install:append() { do_compile_ptest() { oe_runmake buildtest-TESTS } + +CVE_STATUS[CVE-2024-2397] = "fixed-version: Fixed since 4.99.5"