Scientific Linux alert SLSA-2018:3854-1 (ntp)

From:
             
 
Scott Reid <svreid@fnal.gov> 
To:
             
 
<scientific-linux-errata@listserv.fnal.gov> 
Subject:
             
 
Security ERRATA Low: ntp on SL6.x i386/x86_64 
Date:
             
 
Thu, 20 Dec 2018 17:24:39 +0000
Message-ID:
             
 
<20181220172439.6131.28751@slpackages.fnal.gov>
Synopsis:          Low: ntp security update
Advisory ID:       SLSA-2018:3854-1
Issue Date:        2018-12-20
CVE Numbers:       CVE-2018-12327
--

Security Fix(es):

* ntp: Stack-based buffer overflow in ntpq and ntpdc allows denial of
service or code execution (CVE-2018-12327)
--

SL6
  x86_64
    ntp-4.2.6p5-15.el6_10.x86_64.rpm
    ntp-debuginfo-4.2.6p5-15.el6_10.x86_64.rpm
    ntpdate-4.2.6p5-15.el6_10.x86_64.rpm
    ntp-perl-4.2.6p5-15.el6_10.x86_64.rpm
  i386
    ntp-4.2.6p5-15.el6_10.i686.rpm
    ntp-debuginfo-4.2.6p5-15.el6_10.i686.rpm
    ntpdate-4.2.6p5-15.el6_10.i686.rpm
    ntp-perl-4.2.6p5-15.el6_10.i686.rpm
  noarch
    ntp-doc-4.2.6p5-15.el6_10.noarch.rpm

- Scientific Linux Development Team