Scientific Linux alert SLSA-2019:2077-1 (ntp)

From:
             
 
Farhan Ahmed <fahmed@fnal.gov> 
To:
             
 
scientific-linux-errata@listserv.fnal.gov 
Subject:
             
 
Security ERRATA Low: ntp on SL7.x x86_64 
Date:
             
 
Mon, 26 Aug 2019 18:54:30 -0000
Message-ID:
             
 
<20190826185430.477.35047@slpackages.fnal.gov>
Synopsis: Low: ntp security, bug fix, and enhancement update
Advisory ID:       SLSA-2019:2077-1
Issue Date:        2019-08-06
CVE Numbers:       CVE-2018-12327
--

Security Fix(es):

* ntp: Stack-based buffer overflow in ntpq and ntpdc allows denial of
service or code execution (CVE-2018-12327)
--

SL7
  x86_64
    ntpdate-4.2.6p5-29.el7.x86_64.rpm
    ntp-4.2.6p5-29.el7.x86_64.rpm
    ntp-doc-4.2.6p5-29.el7.noarch.rpm
    sntp-4.2.6p5-29.el7.x86_64.rpm
    ntp-perl-4.2.6p5-29.el7.noarch.rpm
    ntp-debuginfo-4.2.6p5-29.el7.x86_64.rpm
  noarch
    ntp-doc-4.2.6p5-29.el7.noarch.rpm
    ntp-perl-4.2.6p5-29.el7.noarch.rpm

- Scientific Linux Development Team