FEDORA-2018-70c191d84a — security update for ntp

stable

ntp-4.2.8p11-1.fc26

FEDORA-2018-70c191d84a created by mlichvar 6 years ago for Fedora 26

Security fix for CVE-2016-1549, CVE-2018-7170, CVE-2018-7182, CVE-2018-7183, CVE-2018-7184, CVE-2018-7185

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-70c191d84a

This update has been submitted for testing by mlichvar.

6 years ago

This update has been pushed to testing.

6 years ago

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

6 years ago

hreindl commented & provided feedback 6 years ago

karma

works for me

This update has been submitted for batched by mlichvar.

6 years ago

This update has been submitted for stable by bodhi.

6 years ago

This update has been pushed to stable.

6 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

6 years ago

in testing

6 years ago

in stable

6 years ago

Builds

ntp-4.2.8p11-1.fc26

BZ#1550208 CVE-2018-7182 ntp: buffer read overrun leads information leak in ctl_getitem()

BZ#1550214 CVE-2018-7170 ntp: Ephemeral association time spoofing additional protection

BZ#1550218 CVE-2018-7184 ntp: Interleaved symmetric mode cannot recover from bad state

BZ#1550220 CVE-2018-7185 ntp: Unauthenticated packet can reset authenticated interleaved association

BZ#1550223 CVE-2018-7183 ntp: decodearr() can write beyond its buffer limit

BZ#1550228 CVE-2018-7170 CVE-2018-7182 CVE-2018-7183 CVE-2018-7184 CVE-2018-7185 ntp: various flaws [fedora-all]

ntp-4.2.8p11-1.fc26

Automated Test Results

passed