Bug ID 700299: Missing changelog entry for CVE-2015-5146 in ntp.spec

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.10, 12.1.2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6

Opened: Dec 29, 2017

Severity: 5-Cosmetic

Symptoms

There is no changelog entry in ntp.spec indicating that CVE-2015-5146 was fixed.

Impact

The changelog entries in ntp.spec are misleading implies that CVE-2015-5146 was not actually fixed, even though it was.

Conditions

Running a version of BIG-IP where F5 indicates CVE-2015-5146 has been fixed.

Workaround

None.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips