From 3a5bfe4c4db692f10aab090a73c412eb75ea1bb5 Mon Sep 17 00:00:00 2001 From: Peter Marko Date: Wed, 20 Aug 2025 18:24:14 +0200 Subject: [PATCH] Revert "dpkg: set status for CVE-2025-6297" This reverts commit 5dce840ba8f409490cca5dce9fe504c9115fb4e5. CVE entry was corrected in NVD DB. It looks like NVD is now getting faster and more reliable with annotations... Signed-off-by: Peter Marko Cc: Ross Burton Signed-off-by: Mathieu Dubois-Briand --- meta/recipes-devtools/dpkg/dpkg_1.22.21.bb | 3 --- 1 file changed, 3 deletions(-) diff --git a/meta/recipes-devtools/dpkg/dpkg_1.22.21.bb b/meta/recipes-devtools/dpkg/dpkg_1.22.21.bb index 69b3c3d880..d793c26d57 100644 --- a/meta/recipes-devtools/dpkg/dpkg_1.22.21.bb +++ b/meta/recipes-devtools/dpkg/dpkg_1.22.21.bb @@ -19,6 +19,3 @@ SRC_URI = "git://salsa.debian.org/dpkg-team/dpkg.git;protocol=https;branch=1.22. SRC_URI:append:class-native = " file://0001-build.c-ignore-return-of-1-from-tar-cf.patch" SRCREV = "d72b038fd2113cb62972e4071db03dd1388394d8" - -# NVD tracks this CVE as "Up to (excluding) 2025-06-30" (which is fix commit date, not dpkg version) -CVE_STATUS[CVE-2025-6297] = "cpe-incorrect: this is fixed in 1.22.21" -- 2.47.3