Armin Kuster 275dd812d5 ntp: update to 4.2.8.p11 ...

This release addresses five security issues in ntpd:

  LOW/MEDIUM: Sec 3012 / CVE-2016-1549 / VU#961909: Sybil vulnerability: ephemeral association attack
  INFO/MEDIUM: Sec 3412 / CVE-2018-7182 / VU#961909: ctl_getitem(): buffer read overrun leads to undefined behavior and information leak
  LOW: Sec 3415 / CVE-2018-7170 / VU#961909: Multiple authenticated ephemeral associations
  LOW: Sec 3453 / CVE-2018-7184 / VU#961909: Interleaved symmetric mode cannot recover from bad state
  LOW/MEDIUM: Sec 3454 / CVE-2018-7185 / VU#961909: Unauthenticated packet can reset authenticated interleaved association

one security issue in ntpq:
  MEDIUM: Sec 3414 / CVE-2018-7183 / VU#961909: ntpq:decodearr() can write beyond its buffer limit

Signed-off-by: Armin Kuster <akuster@mvista.com>
(cherry picked from commit 18b4b0ec54)
Signed-off-by: Armin Kuster <akuster808@gmail.com>

2018-06-14 20:04:24 -07:00

..

ntp

ntp: refresh patch

2018-04-09 12:32:07 -04:00

ntp_4.2.8p11.bb

ntp: update to 4.2.8.p11

2018-06-14 20:04:24 -07:00