mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-30 14:01:57 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/ntp: ignore CVE-2015-7977

Browse Source 
The NVD database schema has the following entry

```
{
  "vulnerable": true,
  "criteria": "cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*",
  "versionEndIncluding": "4.2.8",
},
```

Which make every patch revision of the package ntp match to the
CVE-2015-7977.

This commit ignore this entry.

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
Thomas Perale
2026-06-02 22:23:22 +02:00
committed by Julien Olivain
parent 00b9069f46
commit 00e4a03348
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
package/ntp/ntp.mk
View File

@@ -25,6 +25,9 @@ NTP_CONF_OPTS = \
--with-yielding-select=yes \ --with-yielding-select=yes \
--disable-local-libevent --disable-local-libevent
# NVD Entry incorrectly match on every patch revision. Fixed in 4.2.8p6.
NTP_IGNORE_CVES += CVE-2015-7977
# 0002-ntp-syscalls-fallback.patch # 0002-ntp-syscalls-fallback.patch
NTP_AUTORECONF = YES NTP_AUTORECONF = YES