diff mbox series

[meta-networking,scarthgap] ntp: add CVE-2026-1548 to CVE_STATUS_NTP

Message ID 20260930092915.1909757-1-joaomarcos.costa@bootlin.com
State Superseded, archived
Headers show
Series [meta-networking,scarthgap] ntp: add CVE-2026-1548 to CVE_STATUS_NTP | expand

Commit Message

Joao Marcos Costa Sept. 30, 2026, 9:29 a.m. UTC 
From: João Marcos Costa (Schneider Electric) <joaomarcos.costa@bootlin.com>

This vulnerability actually affects 4.2.8p4 and earlier [1], and
meta-networking provides as of now 4.2.8p17.

Add it to CVE_STATUS_NTP so this CVE is no longer reported.

[1] https://security-tracker.debian.org/tracker/CVE-2016-1548

Signed-off-by: João Marcos Costa (Schneider Electric) <joaomarcos.costa@bootlin.com>
---
 meta-networking/recipes-support/ntp/ntp_4.2.8p17.bb | 1 +
 1 file changed, 1 insertion(+)

Comments

Joao Marcos Costa Sept. 30, 2026, 2:48 p.m. UTC | #1 
The Subject is not correct: the CVE is CVE-2016-1548, while the subject 
contains "2026".

I will send a v2 with the fixed Subject.
diff mbox series

Patch

diff --git a/meta-networking/recipes-support/ntp/ntp_4.2.8p17.bb b/meta-networking/recipes-support/ntp/ntp_4.2.8p17.bb
index 4ed58cd6a4..ba6e770618 100644
--- a/meta-networking/recipes-support/ntp/ntp_4.2.8p17.bb
+++ b/meta-networking/recipes-support/ntp/ntp_4.2.8p17.bb
@@ -43,6 +43,7 @@  CVE_STATUS_NTP = " \
     CVE-2015-8140 \
     CVE-2015-8158 \
     CVE-2016-1547 \
+    CVE-2016-1548 \
     CVE-2016-2516 \
     CVE-2016-2517 \
     CVE-2016-2519 \