Lucene search

K
suseSuseSUSE-SU-2015:0322-1
HistoryFeb 19, 2015 - 1:05 a.m.

Security update for xntp (important)

2015-02-1901:05:02
lists.opensuse.org
18

0.044 Low

EPSS

Percentile

91.6%

xntp has been updated to fix two security issues:

   * CVE-2014-9298: ::1 can be spoofed on some OSes, so ACLs based on
     IPv6 ::1 addresses can be bypassed (bnc#911792).
   * CVE-2014-9297: vallen is not validated in several places in
     ntp_crypto.c, leading to potential info leak (bnc#911792).

Security Issues:

   * CVE-2014-9294
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9294">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9294</a>&gt;
   * CVE-2014-9293
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9293">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9293</a>&gt;
   * CVE-2014-9298
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9298">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9298</a>&gt;
   * CVE-2014-9297
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9297">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9297</a>&gt;