[meta-networking][PATCH 5/6] tcpdump: set status for CVE-2024-2397

From: Peter Marko <[email protected]>

This CVE is fixed with commit [1] included in release 4.99.5.
It is a cherry-pick of commit [2] mentioned in NVD report [3].

cvelistV5 and FKIE list hash as fixed version ("lessThan": "b9811ef"),
which causes a false positive thus needs to be handled explicitly.

[1] https://github.com/the-tcpdump-group/tcpdump/commit/e9bff173f9833b5532f3b6dce8c049e955140169
[2] https://github.com/the-tcpdump-group/tcpdump/commit/b9811ef5bb1b7d45a90e042f81f3aaf233c8bcb2
[3] https://nvd.nist.gov/vuln/detail/CVE-2024-2397

Signed-off-by: Peter Marko <[email protected]>
---
 meta-networking/recipes-support/tcpdump/tcpdump_4.99.6.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta-networking/recipes-support/tcpdump/tcpdump_4.99.6.bb b/meta-networking/recipes-support/tcpdump/tcpdump_4.99.6.bb
index f1bd32485c..af7e8b6ba4 100644
--- a/meta-networking/recipes-support/tcpdump/tcpdump_4.99.6.bb
+++ b/meta-networking/recipes-support/tcpdump/tcpdump_4.99.6.bb
@@ -52,3 +52,5 @@ do_install:append() {
 do_compile_ptest() {
     oe_runmake buildtest-TESTS
 }
+
+CVE_STATUS[CVE-2024-2397] = "fixed-version: Fixed since 4.99.5"