Browse Source

dovecot: ignore CVE-2016-4983 (again)

I removed the CVE_STATUS setting for CVE-2016-4983 when this recipe was
updated to 2.4.1-4 - but that was a mistake, the CVE database considers
(incorrectly) even the latest version as vulnerable.

Revert that mistake by adding back the correct CVE_STATUS to the recipe.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Gyorgy Sarvari 1 week ago
parent
commit
a637a72182
1 changed files with 2 additions and 0 deletions
  1. 2 0
      meta-networking/recipes-support/dovecot/dovecot_2.4.1-4.bb

+ 2 - 0
meta-networking/recipes-support/dovecot/dovecot_2.4.1-4.bb

@@ -75,3 +75,5 @@ FILES:${PN} += "${libdir}/dovecot/*plugin.so \
 FILES:${PN}-staticdev += "${libdir}/dovecot/*/*.a"
 FILES:${PN}-dev += "${libdir}/dovecot/libdovecot*.so"
 FILES:${PN}-dbg += "${libdir}/dovecot/*/.debug"
+
+CVE_STATUS[CVE-2016-4983] = "not-applicable-platform: Affects only postinstall script on specific distribution."