tpm2-tools: set status for CVE-2017-7524 and CVE-2024-29039

CVE-2017-7524 is a historical CVE and new cve-check does not undestand
fixed version data. Debian report [1] shows fix commit which can be
linked to release information.

CVE-2024-29039 is per Debian report [2] fixed in 5.7.

[1] https://security-tracker.debian.org/tracker/CVE-2017-7524
[2] https://security-tracker.debian.org/tracker/CVE-2024-29039

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
This commit is contained in:
Peter Marko
2026-07-21 18:45:35 +02:00
committed by Scott Murray
parent 79b0dbd8f7
commit 603cd3ff49
@@ -19,3 +19,6 @@ PACKAGECONGIG ??= "efivar"
PACKAGECONFIG[efivar] = "--with-efivar,--without-efivar,efivar"
BBCLASSEXTEND = "native nativesdk"
CVE_STATUS[CVE-2017-7524] = "fixed-version: Fixed since version 3.0.0"
CVE_STATUS[CVE-2024-29039] = "fixed-version: Fixed since version 5.7"