Bug 14210

Summary:	[CVE 21] ntp 4.2.8 CVE
Product:	[ROSA-based products] ROSA Fresh	Reporter:	Vladimir Potapov <v.potapov>
Component:	Packages from Main	Assignee:	ROSA Linux Bugs <bugs>
Status:	RESOLVED FIXED	QA Contact:	ROSA Linux Bugs <bugs>
Severity:	normal
Priority:	Normal	CC:	s.matveev
Version:	All	Flags:	v.potapov: secteam_verified?
Target Milestone:	2021.1 Fresh R12
Hardware:	All
OS:	Linux
URL:	CVE-2015-7977
Whiteboard:
Platform:	2021.1	ROSA Vulnerability identifier:
RPM Package:		ISO-related:
Bad POT generating:		Upstream:

Description Vladimir Potapov 2024-01-11 07:03:03 MSK

https://nvd.nist.gov/vuln/detail/CVE-2015-7977 medium
В дебиан есть исправляющий коммит
https://security-tracker.debian.org/tracker/CVE-2015-7977

Comment 1 Svyatoslav Matveev 2024-01-11 09:21:19 MSK

В нашей версии уже содержаться исправления.

Ссылка на исправление:
https://github.com/ntp-project/ntp/commit/8a0c765f3c47633fa262356b0818788d1cf249b1

Comment 2 Vladimir Potapov 2024-01-11 09:31:12 MSK

ага, в описании "ntpd in NTP before 4.2.8p6" а у нас 4.2.8p15