mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-01 13:18:36 -09:00
package/ntp: ignore CVE-2015-7977
The NVD database schema has the following entry
```
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*",
"versionEndIncluding": "4.2.8",
},
```
Which make every patch revision of the package ntp match to the
CVE-2015-7977.
This commit ignore this entry.
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
committed by
Julien Olivain
parent
00b9069f46
commit
00e4a03348
@@ -25,6 +25,9 @@ NTP_CONF_OPTS = \
|
||||
--with-yielding-select=yes \
|
||||
--disable-local-libevent
|
||||
|
||||
# NVD Entry incorrectly match on every patch revision. Fixed in 4.2.8p6.
|
||||
NTP_IGNORE_CVES += CVE-2015-7977
|
||||
|
||||
# 0002-ntp-syscalls-fallback.patch
|
||||
NTP_AUTORECONF = YES
|
||||
|
||||
|
||||
Reference in New Issue
Block a user