tpm2-tools: set status for CVE-2017-7524 and CVE-2024-29039

CVE-2017-7524 is a historical CVE and new cve-check does not undestand
fixed version data. Debian report [1] shows fix commit which can be
linked to release information.

CVE-2024-29039 is per Debian report [2] fixed in 5.7.

[1] https://security-tracker.debian.org/tracker/CVE-2017-7524
[2] https://security-tracker.debian.org/tracker/CVE-2024-29039

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
This commit is contained in:
Peter Marko
2026-09-14 01:59:30 +03:00
committed by Scott Murray
parent 2491b069c4
commit 0a641b1ee8
@@ -19,3 +19,6 @@ PACKAGECONGIG ??= "efivar"
PACKAGECONFIG[efivar] = "--with-efivar,--without-efivar,efivar"
BBCLASSEXTEND = "native nativesdk"
CVE_STATUS[CVE-2017-7524] = "fixed-version: Fixed since version 3.0.0"
CVE_STATUS[CVE-2024-29039] = "fixed-version: Fixed since version 5.7"