FEDORA-2017-72323a442f — security update for ntp

stable

ntp-4.2.6p5-44.fc24

FEDORA-2017-72323a442f created by mlichvar 5 years ago for Fedora 24

Security fix for CVE-2017-6464 CVE-2017-6462 CVE-2017-6463 CVE-2017-6458 CVE-2017-6451.

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2017-72323a442f

This update has been submitted for testing by mlichvar.

5 years ago

This update has been pushed to testing.

5 years ago

adamwill commented & provided feedback 5 years ago

karma

ntpdate seems to work at least

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

5 years ago

hreindl commented & provided feedback 5 years ago

karma

works for me

This update has been submitted for stable by mlichvar.

5 years ago

This update has been pushed to stable.

5 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

ntp-4.2.6p5-44.fc24

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

BZ#1433987 CVE-2017-6464 ntp: Denial of Service via Malformed Config

BZ#1433995 CVE-2017-6462 ntp: Buffer Overflow in DPTS Clock

BZ#1434002 CVE-2017-6463 ntp: Authenticated DoS via Malicious Config Option

BZ#1434005 CVE-2017-6458 ntp: Potential Overflows in ctl_put() functions

BZ#1434011 CVE-2017-6451 ntp: Improper use of snprintf() in mx4200_send()

BZ#1434755 Typos in ntpd man page

BZ#1435163 CVE-2017-6464 CVE-2017-6462 CVE-2017-6463 CVE-2017-6458 CVE-2017-6451 ntp: various flaws [fedora-all]

ntp-4.2.6p5-44.fc24

Automated Test Results

None