New ntp packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1,
and -current to fix a security issue.
Here are the details from the Slackware 14.1 ChangeLog:
+--------------------------+
patches/packages/ntp-4.2.8p3-
This update fixes a security issue where under specific circumstances an
attacker can send a crafted packet to cause a vulnerable ntpd instance to
crash. Since this requires 1) ntpd set up to allow remote configuration
(not allowed by default), and 2) knowledge of the configuration password,
and 3) access to a computer entrusted to perform remote configuration,
the vulnerability is considered low-risk.
For more information, see:
http://cve.mitre.org/cgi-bin/
(* Security fix *)
+--------------------------+
Where to find the new packages:
+-----------------------------
Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project! :-)
Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.
Updated package for Slackware 13.0:
ftp://ftp.slackware.com/pub/
Updated package for Slackware x86_64 13.0:
ftp://ftp.slackware.com/pub/
Updated package for Slackware 13.1:
ftp://ftp.slackware.com/pub/
Updated package for Slackware x86_64 13.1:
ftp://ftp.slackware.com/pub/
Updated package for Slackware 13.37:
ftp://ftp.slackware.com/pub/
Updated package for Slackware x86_64 13.37:
ftp://ftp.slackware.com/pub/
Updated package for Slackware 14.0:
ftp://ftp.slackware.com/pub/
Updated package for Slackware x86_64 14.0:
ftp://ftp.slackware.com/pub/
Updated package for Slackware 14.1:
ftp://ftp.slackware.com/pub/
Updated package for Slackware x86_64 14.1:
ftp://ftp.slackware.com/pub/
Updated package for Slackware -current:
ftp://ftp.slackware.com/pub/
Updated package for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/
MD5 signatures:
+-------------+
Slackware 13.0 package:
a1780621556bf581833f0a46c21812
Slackware x86_64 13.0 package:
fbece86086ef7e84e02e959cfab928
Slackware 13.1 package:
020367073707b66ec4992de74b315f
Slackware x86_64 13.1 package:
87663d4a7c7699df446fc937054426
Slackware 13.37 package:
c9a263e726932d81eab293725b4cb8
Slackware x86_64 13.37 package:
d2cdaf7078872c162161c5356af820
Slackware 14.0 package:
db95841f80cd3e019109416636e6e8
Slackware x86_64 14.0 package:
7f6094e35e892e4d77201602b04430
Slackware 14.1 package:
cb60dd8aa75c7ac9e7a3a38cc055df
Slackware x86_64 14.1 package:
bba510875648be7eb2e6f206947824
Slackware -current package:
db3a89a88447f5886a4b4fe4f24680
Slackware x86_64 -current package:
feff97f062bf9e536e4ebf31c7bd23
Installation instructions:
+------------------------+
Upgrade the package as root:
# upgradepkg ntp-4.2.8p3-i486-1_slack14.1.
Then, restart the NTP daemon:
# sh /etc/rc.d/rc.ntpd restart
+-----+
Slackware Linux Security Team
http://slackware.com/gpg-key
security@slackware.com
+-----------------------------
| To leave the slackware-security mailing list: |
+-----------------------------
| Send an email to majordomo@slackware.com with this text in the body of |
| the email message: |
| |
| unsubscribe slackware-security |
| |
| You will get a confirmation message back containing instructions to |
| complete the process. Please do not reply to this email address. |
+-----------------------------
-
Komentarų nėra:
Rašyti komentarą