From a637a72182b36a4ff30ef62f9834b0ad81027d38 Mon Sep 17 00:00:00 2001 From: Gyorgy Sarvari Date: Mon, 13 Oct 2025 20:47:40 +0200 Subject: [PATCH] dovecot: ignore CVE-2016-4983 (again) I removed the CVE_STATUS setting for CVE-2016-4983 when this recipe was updated to 2.4.1-4 - but that was a mistake, the CVE database considers (incorrectly) even the latest version as vulnerable. Revert that mistake by adding back the correct CVE_STATUS to the recipe. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj --- meta-networking/recipes-support/dovecot/dovecot_2.4.1-4.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-networking/recipes-support/dovecot/dovecot_2.4.1-4.bb b/meta-networking/recipes-support/dovecot/dovecot_2.4.1-4.bb index a06fd45199..5894c76bac 100644 --- a/meta-networking/recipes-support/dovecot/dovecot_2.4.1-4.bb +++ b/meta-networking/recipes-support/dovecot/dovecot_2.4.1-4.bb @@ -75,3 +75,5 @@ FILES:${PN} += "${libdir}/dovecot/*plugin.so \ FILES:${PN}-staticdev += "${libdir}/dovecot/*/*.a" FILES:${PN}-dev += "${libdir}/dovecot/libdovecot*.so" FILES:${PN}-dbg += "${libdir}/dovecot/*/.debug" + +CVE_STATUS[CVE-2016-4983] = "not-applicable-platform: Affects only postinstall script on specific distribution."