FEDORA-2016-8bb1932088 — security update for ntp

stable

ntp-4.2.6p5-36.fc23

FEDORA-2016-8bb1932088 created by mlichvar 10 years ago for Fedora 23

Security fix for CVE-2015-7974, CVE-2015-8138, CVE-2015-7977, CVE-2015-7978, CVE-2015-7979, CVE-2015-8158

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2016-8bb1932088

This update has been submitted for testing by mlichvar.

10 years ago

hreindl commented & provided feedback 10 years ago

karma

works for me

This update has been pushed to testing.

10 years ago

gbcox commented & provided feedback 10 years ago

karma

Works for me

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

10 years ago

This update has been submitted for stable by mlichvar.

10 years ago

This update has been pushed to stable.

10 years ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

10 years ago

in testing

10 years ago

in stable

10 years ago

Builds

ntp-4.2.6p5-36.fc23

BZ#1297471 CVE-2015-7974 ntp: missing key check allows impersonation between authenticated peers (VU#357792)

BZ#1299442 CVE-2015-8138 ntp: missing check for zero originate timestamp

BZ#1300269 CVE-2015-7977 ntp: restriction list NULL pointer dereference

BZ#1300270 CVE-2015-7978 ntp: stack exhaustion in recursive traversal of restriction list

BZ#1300271 CVE-2015-7979 ntp: off-path denial of service on authenticated broadcast mode

BZ#1300273 CVE-2015-8158 ntp: potential infinite loop in ntpq

BZ#1300277 CVE-2015-7974 CVE-2015-8138 CVE-2015-7973 CVE-2015-7975 CVE-2015-7976 CVE-2015-7977 CVE-2015-7978 CVE-2015-7979 CVE-2015-8158 CVE-2015-8139 CVE-2015-8140 ntp: various flaws [fedora-all]

ntp-4.2.6p5-36.fc23

Automated Test Results

None