File _patchinfo of Package patchinfo.10554

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.10554

<patchinfo incident="10554">
  <issue tracker="bnc" id="1128525">VUL-0: CVE-2019-8936: ntp: ntp: Crafted null dereference attack in authenticated mode 6 packet</issue>
  <issue tracker="bnc" id="1125401">ntpd[2106]: OpenSSL version mismatch. Built against 1000109f, you have 1000210f</issue>
  <issue tracker="cve" id="2019-8936"/>
  <category>security</category>
  <rating>moderate</rating>
  <packager>rmax</packager>
  <description>This update for ntp fixes the following issues:

Security issue fixed:

- CVE-2019-8936: Fixed a null pointer exception which could allow an authenticated attcker to cause 
  segmentation fault to ntpd (bsc#1128525).

Other isses addressed:

- Fixed an issue which caused openSSL mismatch (bsc#1125401)
- Fixed several bugs in the BANCOMM reclock driver.
- Fixed ntp_loopfilter.c snprintf compilation warnings.
- Fixed spurious initgroups() error message.
- Fixed STA_NANO struct timex units.
- Fixed GPS week rollover in libparse.
- Fixed incorrect poll interval in packet.
- Added a missing check for ENABLE_CMAC.
</description>
  <summary>Security update for ntp</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.10554

Places