shield Security update for ntp

slessp4-ntp-13832

NTP was updated to 4.2.8p12 (bsc#1111853): - CVE-2018-12327: Fixed stack buffer overflow in the openhost() command-line call of NTPQ/NTPDC. (bsc#1098531) - CVE-2018-7170: Add further tweaks to improve the fix for the ephemeral association time spoofing additional protection (bsc#1083424) Please also see https://www.nwtime.org/network-time-foundation-publishes-ntp-4-2-8p12/ for more information.

• Release Date
  Oct 23 2018
• References
  Bugzilla: 1083424, 1098531, 1111853
  CVEs: CVE-2018-12327, CVE-2018-7170
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 11.4 ia64

• Packages
  ntp
  Network Time Protocol daemon (version 4)

  4.2.8p12-64.7.1 lock rpm lock src

  ntp-doc
  Additional Package Documentation for ntp

  4.2.8p12-64.7.1 lock rpm

SUSE Linux Enterprise Server 11.4 i586

• Packages
  ntp
  Network Time Protocol daemon (version 4)

  4.2.8p12-64.7.1 lock rpm lock src

  ntp-doc
  Additional Package Documentation for ntp

  4.2.8p12-64.7.1 lock rpm

SUSE Linux Enterprise Server 11.4 s390x

• Packages
  ntp
  Network Time Protocol daemon (version 4)

  4.2.8p12-64.7.1 lock rpm lock src

  ntp-doc
  Additional Package Documentation for ntp

  4.2.8p12-64.7.1 lock rpm

SUSE Linux Enterprise Server for SAP Applications 11.4 ppc64

• Packages
  ntp
  Network Time Protocol daemon (version 4)

  4.2.8p12-64.7.1 lock rpm lock src

  ntp-doc
  Additional Package Documentation for ntp

  4.2.8p12-64.7.1 lock rpm

SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64

• Packages
  ntp
  Network Time Protocol daemon (version 4)

  4.2.8p12-64.7.1 lock rpm lock src

  ntp-doc
  Additional Package Documentation for ntp

  4.2.8p12-64.7.1 lock rpm