From 2bb062e403c7093734de6467c49503a7d8970d9e Mon Sep 17 00:00:00 2001 From: Peter Marko Date: Wed, 5 Aug 2026 19:28:38 +0200 Subject: [PATCH] nfs-utils: set status for CVE-2025-12801 New version of sbom-cve-check makes more torough version validation and version strings with distro specific suffix is no longer accepted, thus leaving some CVEs without version to compare (no-version-ranges). This is RedHat version-less CVE. Signed-off-by: Peter Marko Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie --- meta/recipes-connectivity/nfs-utils/nfs-utils_2.9.2.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-connectivity/nfs-utils/nfs-utils_2.9.2.bb b/meta/recipes-connectivity/nfs-utils/nfs-utils_2.9.2.bb index e60011ff9f..c2017a14ef 100644 --- a/meta/recipes-connectivity/nfs-utils/nfs-utils_2.9.2.bb +++ b/meta/recipes-connectivity/nfs-utils/nfs-utils_2.9.2.bb @@ -149,3 +149,5 @@ do_install:append () { chown -R rpcuser:rpcuser ${D}${localstatedir}/lib/nfs/statd chmod 0644 ${D}${localstatedir}/lib/nfs/statd/state } + +CVE_STATUS[CVE-2025-12801] = "fixed-version: Fixed since v2.8.6" -- 2.47.3