helium-3rd-party/meta-openembedded
1
0
Fork 0
mirror of git://git.openembedded.org/meta-openembedded synced 2026-08-11 15:16:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

dovecot: ignore CVE-2025-30189

Browse Source 
Vulnerable versions are 2.4.0, 2.4.1 according to the full disclosure[1]

Details: https://nvd.nist.gov/vuln/detail/CVE-2025-30189

[1] https://seclists.org/fulldisclosure/2025/Oct/29

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>

Adapted to Kirkstone.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
This commit is contained in:
Ankur Tyagi 2026-02-22 17:45:31 +01:00 committed by Gyorgy Sarvari
parent 33822593e5
commit 3e3bd7acfc
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
meta-networking/recipes-support/dovecot/dovecot_2.3.14.bb
View File

@ -78,3 +78,6 @@ FILES:${PN}-dbg += "${libdir}/dovecot/*/.debug"
# CVE-2016-4983 affects only postinstall script on specific distribution
CVE_CHECK_IGNORE += "CVE-2016-4983"
# cpe-incorrect: The current version (2.3.14) is not affected.
CVE_CHECK_IGNORE += "CVE-2025-30189"