openSUSE Security Update : openSUSE-2014- (openSUSE-2014--1)
Medium Nessus Plugin ID 76933
SynopsisThe remote openSUSE host is missing a security update.
DescriptionThe NTP time service could be used for remote denial of service amplification attacks.
This issue can be fixed by the administrator as we described in our security advisory SUSE-SA:2014:001 http://lists.opensuse.org/opensuse-security-announce/2014-01/msg00005.
and on http://support.novell.com/security/cve/CVE-2013-5211.html
This update now also replaces the default ntp.conf template to fix this problem.
Please note that if you have touched or modified ntp.conf yourself, it will not be automatically fixed, you need to merge the changes manually as described.
SolutionUpdate the affected openSUSE-2014- packages.