package/ntp: ignore CVE-2015-7977

The NVD database schema has the following entry

```
{
  "vulnerable": true,
  "criteria": "cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*",
  "versionEndIncluding": "4.2.8",
},
```

Which make every patch revision of the package ntp match to the
CVE-2015-7977.

This commit ignore this entry.

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
Thomas Perale
2026-06-02 22:23:22 +02:00
committed by Julien Olivain
parent 00b9069f46
commit 00e4a03348

View File

@@ -25,6 +25,9 @@ NTP_CONF_OPTS = \
--with-yielding-select=yes \
--disable-local-libevent
# NVD Entry incorrectly match on every patch revision. Fixed in 4.2.8p6.
NTP_IGNORE_CVES += CVE-2015-7977
# 0002-ntp-syscalls-fallback.patch
NTP_AUTORECONF = YES