From: Peter Marko <[email protected]> New version of sbom-cve-check makes more torough version validation and version strings with distro specific suffix is no longer accepted, thus leaving some CVEs without version to compare (no-version-ranges).
This is RedHat version-less CVE. Signed-off-by: Peter Marko <[email protected]> Signed-off-by: Mathieu Dubois-Briand <[email protected]> Signed-off-by: Richard Purdie <[email protected]> (From OE-Core rev: 2bb062e403c7093734de6467c49503a7d8970d9e) Signed-off-by: Peter Marko <[email protected]> --- meta/recipes-connectivity/nfs-utils/nfs-utils_2.8.7.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-connectivity/nfs-utils/nfs-utils_2.8.7.bb b/meta/recipes-connectivity/nfs-utils/nfs-utils_2.8.7.bb index 7693a88682..a5ebf7043e 100644 --- a/meta/recipes-connectivity/nfs-utils/nfs-utils_2.8.7.bb +++ b/meta/recipes-connectivity/nfs-utils/nfs-utils_2.8.7.bb @@ -147,3 +147,5 @@ do_install:append () { chown -R rpcuser:rpcuser ${D}${localstatedir}/lib/nfs/statd chmod 0644 ${D}${localstatedir}/lib/nfs/statd/state } + +CVE_STATUS[CVE-2025-12801] = "fixed-version: Fixed since v2.8.6"
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#246682): https://lists.openembedded.org/g/openembedded-core/message/246682 Mute This Topic: https://lists.openembedded.org/mt/121453114/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
