Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

SUSE 12-SP1: 2016:1563-1 Important Update: NTP Problems Fixed

suse
Calendar Grey June 13, 2016
Scroller Suse
SUSE has released essential updates for NTP that include significant fixes aimed at enhancing system security and addressing various vulnerabilities for better stability.
An update that solves 5 vulnerabilities and has four fixes An update that solves 5 vulnerabilities and has four fixes An update that solves 5 vulnerabilities and has four fixes is ...

Summary

ntp was updated to version 4.2.8p8 to fix five security issues. These security issues were fixed: - CVE-2016-4953: Bad authentication demobilizes ephemeral associations (bsc#982065). - CVE-2016-4954: Processing spoofed server packets (bsc#982066). - CVE-2016-4955: Autokey association reset (bsc#982067). - CVE-2016-4956: Broadcast interleave (bsc#982068). - CVE-2016-4957: CRYPTO_NAK crash (bsc#982064). These non-security issues were fixed: - Keep the parent process alive until the daemon has finished initialisation, to make sure that the PID file exists when the parent returns. - bsc#979302: Change the process name of the forking DNS worker process to avoid the impression that ntpd is started twice. - bsc#981422: Don't ignore SIGCHILD because it breaks wait().

Topics%20covered

Topics Covered

security advisory update critical important SUSE ntp issues

References

#979302 #979981 #981422 #982056 #982064 #982065

#982066 #982067 #982068

Cross- CVE-2016-4953 CVE-2016-4954 CVE-2016-4955

CVE-2016-4956 CVE-2016-4957

Affected Products:

SUSE Linux Enterprise Server 12-SP1

SUSE Linux Enterprise Desktop 12-SP1

https://www.suse.com/security/cve/CVE-2016-4953.html

https://www.suse.com/security/cve/CVE-2016-4954.html

https://www.suse.com/security/cve/CVE-2016-4955.html

https://www.suse.com/security/cve/CVE-2016-4956.html

https://www.suse.com/security/cve/CVE-2016-4957.html

https://bugzilla.suse.com/979302

https://bugzilla.suse.com/979981

https://bugzilla.suse.com/981422

https://bugzilla.suse.com/982056

https://bugzilla.suse.com/982064

https://bugzilla.suse.com/982065

https://bugzilla.suse.com/982066

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2016:1563-1
Rating: important

Topics%20covered

Topics Covered

security advisory update critical important SUSE ntp issues

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.