shield Security update for ntp

SUSE-SLE-SERVER-12-2018-1000

This update for ntp fixes the following issues: - Update to 4.2.8p11 (bsc#1082210): * CVE-2016-1549: Sybil vulnerability: ephemeral association attack. While fixed in ntp-4.2.8p7, there are significant additional protections for this issue in 4.2.8p11. * CVE-2018-7182: ctl_getitem(): buffer read overrun leads to undefined behavior and information leak. (bsc#1083426) * CVE-2018-7170: Multiple authenticated ephemeral associations. (bsc#1083424) * CVE-2018-7184: Interleaved symmetric mode cannot recover from bad state. (bsc#1083422) * CVE-2018-7185: Unauthenticated packet can reset authenticated interleaved association. (bsc#1083420) * CVE-2018-7183: ntpq:decodearr() can write beyond its buffer limit.(bsc#1083417) - Don't use libevent's cached time stamps in sntp. (bsc#1077445) - Fix systemd migration in %pre (bsc#1034892).

• Release Date
  May 29 2018
• References
  Bugzilla: 1034892, 1083424, 1082210, 1077445, 1083417, 1082063, 1083426, 1083420, 1083422
  CVEs: CVE-2018-7170, CVE-2018-7185, CVE-2016-1549, CVE-2018-7184, CVE-2018-7183, CVE-2018-7182
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server LTSS 12 s390x

• Packages
  ntp
  Network Time Protocol daemon (version 4)

  4.2.8p11-46.26.2 lock rpm lock src

  ntp-doc
  Additional Package Documentation for ntp

  4.2.8p11-46.26.2 lock rpm

SUSE Linux Enterprise Server LTSS 12 x86_64

• Packages
  ntp
  Network Time Protocol daemon (version 4)

  4.2.8p11-46.26.2 lock rpm lock src

  ntp-doc
  Additional Package Documentation for ntp

  4.2.8p11-46.26.2 lock rpm