Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Fedora 42 Security Update Addresses Timekeeping Service DoS Vulnerabilities

fedora
Calendar Grey March 31, 2026
Dist Fedora Esm H88
A critical update to Fedora 42's ntpd-rs addresses denial of service threats via malformed NTS packets and CVE-2026-26076.
Update to version 1.7.1

Summary

Full-featured implementation of NTP with NTS support.

Update Information:

Update to version 1.7.1. Includes the fix for CVE-2026-26076: https://github.com/pendulum-project/ntpd- rs/security/advisories/GHSA-c7j7-rmvr-fjmv Release notes: https://github.com/pendulum-project/ntpd-rs/releases/tag/v1.7.0 https://github.com/pendulum-project/ntpd-rs/releases/tag/v1.7.1

Topics%20covered

Topics Covered

security advisory denial of service security issue fedora important ntpd-rs

Change Log

* Sun Mar 22 2026 Fabio Valentini - 1.7.1-1 - Update to version 1.7.1; Fixes RHBZ#2435477

References


[ 1 ] Bug #2439601 - CVE-2026-26076 ntpd-rs: ntpd-rs: Denial of Service via malformed NTS packets requesting excessive cookies [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2439601

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-2dc4882154' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: ntpd-rs
Product: Fedora 42
Version: 1.7.1
Release: 1.fc42
URL: https://github.com/pendulum-project/ntpd-rs
Summary: Full-featured implementation of NTP with NTS support

Topics%20covered

Topics Covered

security advisory denial of service security issue fedora important ntpd-rs

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here