Moderate: linuxptp security, bug fix, and enhancement update
Summary
ALSA-2021:4321: Moderate: linuxptp security, bug fix, and enhancement update. Affects linuxptp versions < 3.1.1-1.el8. Fixed in 3.1.1-1.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The linuxptp packages provide Precision Time Protocol (PTP) implementation for Linux according to IEEE standard 1588. It aims to offer a robust implementation of the standard and utilize modern APIs provided by the Linux kernel.
Vulnerability Detail
The linuxptp package is affected by a vulnerability (CVE-2021-3571) where the length of one-step follow-up in transparent clock is incorrect. This vulnerability could have various impacts and potential security consequences.
How To Fix
Minimum fixed version
3.1.1-1.el8
This is the first release that contains the fix.
sudo dnf update linuxptpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The linuxptp package has been updated to address this vulnerability. It is crucial to upgrade to the latest version to ensure the security and proper functionality of the Precision Time Protocol implementation. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for linuxptp →
FAQ
Linuxptp is a Precision Time Protocol (PTP) implementation for Linux based on IEEE standard 1588. It provides accurate time synchronization for systems.
The vulnerability in linuxptp could potentially lead to security issues and compromise the accuracy of time synchronization in affected systems.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your manifest file (e.g., package-lock.json) and it will provide real-time alerts for open-source vulnerabilities.
No specific workarounds have been mentioned for this vulnerability. It is recommended to upgrade to the latest version of the linuxptp package.
You can refer to the CVE page (CVE-2021-3571) listed in the References section of the vulnerability details for more information about the impact and other related details.
References
Related vulnerabilities
Recent vulnerabilities recorded for linuxptp.
