[meta-security][PATCH 09/15] tpm2-tools: set status for CVE-2017-7524 and CVE-2024-29039
Scott Murray <[email protected]>
| Newsgroups | org.yoctoproject.lists.yocto-patches |
|---|---|
| Message-ID | <603cd3ff492a2e53897774569b20f544c8f4ff49.1787777775.git.scott.murray@konsulko.com> |
From: Peter Marko <[email protected]> CVE-2017-7524 is a historical CVE and new cve-check does not undestand fixed version data. Debian report [1] shows fix commit which can be linked to release information. CVE-2024-29039 is per Debian report [2] fixed in 5.7. [1] https://security-tracker.debian.org/tracker/CVE-2017-7524 [2] https://security-tracker.debian.org/tracker/CVE-2024-29039 Signed-off-by: Peter Marko <[email protected]> Signed-off-by: Scott Murray <[email protected]> --- meta-tpm/recipes-tpm2/tpm2-tools/tpm2-tools_5.7.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-tpm/recipes-tpm2/tpm2-tools/tpm2-tools_5.7.bb b/meta-tpm/recipes-tpm2/tpm2-tools/tpm2-tools_5.7.bb index 04ada78..5c968dd 100644 --- a/meta-tpm/recipes-tpm2/tpm2-tools/tpm2-tools_5.7.bb +++ b/meta-tpm/recipes-tpm2/tpm2-tools/tpm2-tools_5.7.bb @@ -19,3 +19,6 @@ PACKAGECONGIG ??= "efivar" PACKAGECONFIG[efivar] = "--with-efivar,--without-efivar,efivar" BBCLASSEXTEND = "native nativesdk" + +CVE_STATUS[CVE-2017-7524] = "fixed-version: Fixed since version 3.0.0" +CVE_STATUS[CVE-2024-29039] = "fixed-version: Fixed since version 5.7" -- 2.55.0