ELSA-2014-2024

ELSA-2014-2024 - ntp security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2014-12-20

Description

[4.2.6p5-2]
- don't generate weak control key for resolver (CVE-2014-9293)
- don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294)
- fix buffer overflows via specially-crafted packets (CVE-2014-9295)
- don't mobilize passive association when authentication fails (CVE-2014-9296)

Related CVEs

CVE-2014-9293

CVE-2014-9294

CVE-2014-9295

CVE-2014-9296

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	ntp-4.2.6p5-2.el6_6.src.rpm	dd6a6e1458da216cfe5b393065982a4f	ELSA-2018-3854
	ntp-4.2.6p5-2.el6_6.i686.rpm	fc0de81e84cc8bf3960e458930703ead	ELSA-2018-3854
	ntp-doc-4.2.6p5-2.el6_6.noarch.rpm	298616a7d458b11c382c2c94985b3983	ELSA-2018-3854
	ntp-perl-4.2.6p5-2.el6_6.i686.rpm	7b6f26db9053902bf3856ea281b002c3	ELSA-2018-3854
	ntpdate-4.2.6p5-2.el6_6.i686.rpm	0ed7d603b361eb246ef204752e9abc40	ELSA-2018-3854
Oracle Linux 6 (x86_64)	ntp-4.2.6p5-2.el6_6.src.rpm	dd6a6e1458da216cfe5b393065982a4f	ELSA-2018-3854
	ntp-4.2.6p5-2.el6_6.x86_64.rpm	7c892b6a276bf59d396a0880ba5b5646	ELSA-2018-3854
	ntp-doc-4.2.6p5-2.el6_6.noarch.rpm	298616a7d458b11c382c2c94985b3983	ELSA-2018-3854
	ntp-perl-4.2.6p5-2.el6_6.x86_64.rpm	b1cb82636614875b86ad89cd4d8957b3	ELSA-2018-3854
	ntpdate-4.2.6p5-2.el6_6.x86_64.rpm	a856123ca3bd10bfafaca279308980c5	ELSA-2018-3854
Oracle Linux 7 (x86_64)	ntp-4.2.6p5-19.el7_0.src.rpm	44639c3243a1719f7e8d52cdf8eca08b	ELSA-2020-2663
	ntp-4.2.6p5-19.el7_0.x86_64.rpm	24896cc94d74fd7cc75080b6734ad7ed	ELSA-2020-2663
	ntp-doc-4.2.6p5-19.el7_0.noarch.rpm	c2134b1a6fe84fba573f8b8fac40b714	ELSA-2020-2663
	ntp-perl-4.2.6p5-19.el7_0.noarch.rpm	d58c8adf5a104db5d2bb2ce9eb85f7a2	ELSA-2020-2663
	ntpdate-4.2.6p5-19.el7_0.x86_64.rpm	69680a90dd979a701927de22b707cca6	ELSA-2020-2663
	sntp-4.2.6p5-19.el7_0.x86_64.rpm	aa75becf99362e908f4d9b8f28c04a2a	ELSA-2020-2663

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team