SUSE-SU-2019:0775-1: moderate: Security update for ntp
sle-security-updates at lists.suse.com
sle-security-updates at lists.suse.com
Wed Mar 27 08:09:48 MDT 2019
SUSE Security Update: Security update for ntp
______________________________________________________________________________
Announcement ID: SUSE-SU-2019:0775-1
Rating: moderate
References: #1128525
Cross-References: CVE-2019-8936
Affected Products:
SUSE Linux Enterprise Server 12-LTSS
______________________________________________________________________________
An update that fixes one vulnerability is now available.
Description:
This update for ntp fixes the following issues:
Security issue fixed:
- CVE-2019-8936: Fixed a null pointer exception which could allow an
authenticated attcker to cause segmentation fault to ntpd (bsc#1128525).
Other issues addressed:
- Fixed several bugs in the BANCOMM reclock driver.
- Fixed ntp_loopfilter.c snprintf compilation warnings.
- Fixed spurious initgroups() error message.
- Fixed STA_NANO struct timex units.
- Fixed GPS week rollover in libparse.
- Fixed incorrect poll interval in packet.
- Added a missing check for ENABLE_CMAC.
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- SUSE Linux Enterprise Server 12-LTSS:
zypper in -t patch SUSE-SLE-SERVER-12-2019-775=1
Package List:
- SUSE Linux Enterprise Server 12-LTSS (ppc64le s390x x86_64):
ntp-4.2.8p13-46.32.1
ntp-debuginfo-4.2.8p13-46.32.1
ntp-debugsource-4.2.8p13-46.32.1
ntp-doc-4.2.8p13-46.32.1
References:
https://www.suse.com/security/cve/CVE-2019-8936.html
https://bugzilla.suse.com/1128525
More information about the sle-security-updates
mailing list