shield Security update for ntp

SUSE-SLE-SERVER-12-2015-193

ntp was updated to fix two security related flaws as well as "slew" mode handling for leap seconds. The following vulnerabilities were fixe: * ntpd could accept unauthenticated packets with symmetric key crypto. (CVE-2015-1798) * ntpd authentication did not protect symmetric associations against DoS attacks (CVE-2015-1799) * ntp-keygen may generate non-random symmetric keys on big-endian systems (bsc#928321, CVE-2015-3405). The following non-security issues were fixed: * Fix slew mode for leap seconds (bnc#918342).

• Release Date
  Apr 28 2015
• References
  Bugzilla: 918342, 924202, 928321
  CVEs: CVE-2015-1798, CVE-2015-1799, CVE-2015-3405
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12 s390x

• Packages
  ntp
  Network Time Protocol daemon (version 4)

  4.2.6p5-44.1 lock rpm lock src

  ntp-doc
  Additional Package Documentation for ntp

  4.2.6p5-44.1 lock rpm

SUSE Linux Enterprise Server for SAP Applications 12 x86_64

• Packages
  ntp
  Network Time Protocol daemon (version 4)

  4.2.6p5-44.1 lock rpm lock src

  ntp-doc
  Additional Package Documentation for ntp

  4.2.6p5-44.1 lock rpm

SUSE Linux Enterprise Server 12 ppc64le

• Packages
  ntp
  Network Time Protocol daemon (version 4)

  4.2.6p5-44.1 lock rpm lock src

  ntp-doc
  Additional Package Documentation for ntp

  4.2.6p5-44.1 lock rpm