shield Security update for ntp

SUSE-SLE-SAP-12-SP2-2018-2404

NTP was updated to 4.2.8p12 (bsc#1111853): - CVE-2018-12327: Fixed stack buffer overflow in the openhost() command-line call of NTPQ/NTPDC. (bsc#1098531) - CVE-2018-7170: Add further tweaks to improve the fix for the ephemeral association time spoofing additional protection (bsc#1083424) Please also see https://www.nwtime.org/network-time-foundation-publishes-ntp-4-2-8p12/ for more information.

• Release Date
  Oct 23 2018
• References
  Bugzilla: 1083424, 1098531, 1111853
  CVEs: CVE-2018-12327, CVE-2018-7170
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

• Packages
  ntp
  Network Time Protocol daemon (version 4)

  4.2.8p12-64.8.2 lock rpm lock src

  ntp-doc
  Additional Package Documentation for ntp

  4.2.8p12-64.8.2 lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.2 x86_64

• Packages
  ntp
  Network Time Protocol daemon (version 4)

  4.2.8p12-64.8.2 lock rpm lock src

  ntp-doc
  Additional Package Documentation for ntp

  4.2.8p12-64.8.2 lock rpm