[Git][security-tracker-team/security-tracker][master] ntp fixed in sid

Moritz Muehlenhoff jmm at debian.org
Tue Sep 22 10:30:23 BST 2020



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a5ecbf1d by Moritz Muehlenhoff at 2020-09-22T11:30:05+02:00
ntp fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -22483,7 +22483,7 @@ CVE-2020-15027 (ConnectWise Automate through 2020.x has insufficient validation
 CVE-2020-15026 (Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../  ...)
 	NOT-FOR-US: Bludit
 CVE-2020-15025 (ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remo ...)
-	- ntp <unfixed> (low; bug #963807)
+	- ntp 1:4.2.8p15-1 (low; bug #963807)
 	[buster] - ntp <no-dsa> (Minor issue)
 	[stretch] - ntp <not-affected> (Vulnerable code introduced later)
 	[jessie] - ntp <not-affected> (Vulnerable code introduced later)
@@ -22491,6 +22491,7 @@ CVE-2020-15025 (ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allow
 	NOTE: https://support.ntp.org/bin/view/Main/NtpBug3661
 	NOTE: https://support.ntp.org/bin/view/Main/SecurityNotice#June_2020_ntp_4_2_8p15_NTP_Relea
 	NOTE: https://bugs.ntp.org/show_bug.cgi?id=3661
+	NOTE: http://bk.ntp.org/ntp-stable/?PAGE=patch&REV=5e84aa07N2NcL4sE_0dW35Tizc74SA
 CVE-2020-15024 (An issue was discovered in the Login Password feature of the Password  ...)
 	NOT-FOR-US: Avast Antivirus
 CVE-2020-15023



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a5ecbf1d299ab861d2395fee6e2be59857b22f41

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a5ecbf1d299ab861d2395fee6e2be59857b22f41
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200922/14009af9/attachment.html>


More information about the debian-security-tracker-commits mailing list