ntp: adjust default config against distributed denial of service attack
The NTP time service could be used for remote denial of service amplification attacks.
This issue can be fixed by the administrator as we described in our security advisory
SUSE-SA:2014:001
http://lists.opensuse.org/opensuse-security-announce/2014-01/msg00005.html
and on http://support.novell.com/security/cve/CVE-2013-5211.html
This update now also replaces the default ntp.conf template to fix this problem.
Please note that if you have touched or modified ntp.conf yourself, it will not be automatically fixed, you need to merge the changes manually as described.
- Submitted by Reinhard Max (rmax)
Fixed bugs
bnc#857195
VUL-0: CVE-2013-5211: ntp: DoS in monlist feature in ntpd