Lucene search

K
suseSuseOPENSUSE-SU-2018:3438-1
HistoryOct 25, 2018 - 6:10 p.m.

Security update for ntp (moderate)

2018-10-2518:10:27
lists.opensuse.org
396

0.036 Low

EPSS

Percentile

90.6%

This update for NTP to version 4.2.8p12 fixes the following
vulnerabilities (bsc#1111853):

  • CVE-2018-12327: Fixed stack buffer overflow in the openhost()
    command-line call of NTPQ/NTPDC. (bsc#1098531)
  • CVE-2018-7170: Add further tweaks to improve the fix for the ephemeral
    association time spoofing additional protection (bsc#1083424)

Please also see
<a href=“https://www.nwtime.org/network-time-foundation-publishes-ntp-4-2-8p12/”>https://www.nwtime.org/network-time-foundation-publishes-ntp-4-2-8p12/</a> for
more information.

This update was imported from the SUSE:SLE-12-SP1:Update update project.