shield Security update for ntp

SUSE-SLE-SERVER-12-2018-2399

NTP was updated to 4.2.8p12 (bsc#1111853): - CVE-2018-12327: Fixed stack buffer overflow in the openhost() command-line call of NTPQ/NTPDC. (bsc#1098531) - CVE-2018-7170: Add further tweaks to improve the fix for the ephemeral association time spoofing additional protection (bsc#1083424) Please also see https://www.nwtime.org/network-time-foundation-publishes-ntp-4-2-8p12/ for more information.

• Release Date
  Oct 23 2018
• References
  Bugzilla: 1083424, 1098531, 1111853
  CVEs: CVE-2018-12327, CVE-2018-7170
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server LTSS 12 s390x

• Packages
  ntp
  Network Time Protocol daemon (version 4)

  4.2.8p12-46.29.2 lock rpm lock src

  ntp-doc
  Additional Package Documentation for ntp

  4.2.8p12-46.29.2 lock rpm

SUSE Linux Enterprise Server LTSS 12 x86_64

• Packages
  ntp
  Network Time Protocol daemon (version 4)

  4.2.8p12-46.29.2 lock rpm lock src

  ntp-doc
  Additional Package Documentation for ntp

  4.2.8p12-46.29.2 lock rpm