ELSA-2015-2241 — Moderate: chrony security, bug fix, and enhancement update (Oracle Linux 7)

Summary

[2.1.1-1]
- update to 2.1.1 (#1117882)
- add -n option to gzip command to not save timestamp

[2.1-1]
- update to 2.1 (#1117882 #1169353 #1206504 #1209568 CVE-2015-1821
CVE-2015-1822 CVE-2015-1853)
- extend chrony-helper to allow using servers from DNS SRV records (#1211600)
- add servers from DHCP with iburst option by default (#1219492)
- execute test suite

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	chrony	0:2.1.1-1.el7

Vulnerabilities 3

Unscored —

CVE-2015-1821

Heap-based buffer overflow in chrony before 1.31.1 allows remote authenticated users to cause a denial of service (chro…

chrony chrony Debian Ubuntu

Apr 16, 2015
Unscored —

CVE-2015-1822

chrony before 1.31.1 does not initialize the last "next" pointer when saving unacknowledged replies to command requests…

chrony chrony Debian Ubuntu

Apr 16, 2015
Unscored —

CVE-2015-1853

chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allow…

Chrony Chrony chrony chrony Debian Ubuntu

Dec 9, 2019

Moderate: chrony security, bug fix, and enhancement update (Oracle Linux 7)

Summary

Fixed packages 1

Vulnerabilities 3

Heap-based buffer overflow in chrony before 1.31.1 allows remote authenticated users to cause a denial of service (chro…

chrony before 1.31.1 does not initialize the last "next" pointer when saving unacknowledged replies to command requests…

chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allow…