mirror of
https://git.yoctoproject.org/meta-security
synced 2026-08-30 00:32:21 +00:00
tpm2-tools: set status for CVE-2017-7524 and CVE-2024-29039
CVE-2017-7524 is a historical CVE and new cve-check does not undestand fixed version data. Debian report [1] shows fix commit which can be linked to release information. CVE-2024-29039 is per Debian report [2] fixed in 5.7. [1] https://security-tracker.debian.org/tracker/CVE-2017-7524 [2] https://security-tracker.debian.org/tracker/CVE-2024-29039 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Scott Murray <scott.murray@konsulko.com>
This commit is contained in:
committed by
Scott Murray
parent
79b0dbd8f7
commit
603cd3ff49
@@ -19,3 +19,6 @@ PACKAGECONGIG ??= "efivar"
|
||||
PACKAGECONFIG[efivar] = "--with-efivar,--without-efivar,efivar"
|
||||
|
||||
BBCLASSEXTEND = "native nativesdk"
|
||||
|
||||
CVE_STATUS[CVE-2017-7524] = "fixed-version: Fixed since version 3.0.0"
|
||||
CVE_STATUS[CVE-2024-29039] = "fixed-version: Fixed since version 5.7"
|
||||
|
||||
Reference in New Issue
Block a user