ELSA-2014-2024

ELSA-2014-2024 - ntp security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2014-12-20

Description

[4.2.6p5-2]
- don't generate weak control key for resolver (CVE-2014-9293)
- don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294)
- fix buffer overflows via specially-crafted packets (CVE-2014-9295)
- don't mobilize passive association when authentication fails (CVE-2014-9296)

Related CVEs

CVE-2014-9293

CVE-2014-9296

CVE-2014-9295

CVE-2014-9294

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	ntp-4.2.6p5-2.el6_6.src.rpm	bbddcf587863c736604995f35bce0937e3d9d7b34fd802906c971464b017b913	ELSA-2018-3854	ol6_i386_latest_archive
	ntp-4.2.6p5-2.el6_6.src.rpm	bbddcf587863c736604995f35bce0937e3d9d7b34fd802906c971464b017b913	ELSA-2018-3854	ol6_u6_i386_patch
	ntp-4.2.6p5-2.el6_6.i686.rpm	912a9c272a72908654cb61bc9ca1b5a88b836e2edfa3598151f4547c4c9c66b0	ELSA-2018-3854	ol6_i386_latest_archive
	ntp-4.2.6p5-2.el6_6.i686.rpm	912a9c272a72908654cb61bc9ca1b5a88b836e2edfa3598151f4547c4c9c66b0	ELSA-2018-3854	ol6_u6_i386_patch
	ntp-doc-4.2.6p5-2.el6_6.noarch.rpm	0c8320610b62e9d430aaae07fdd0ead45f962e9c71ec4459578a08ab6c509355	ELSA-2018-3854	ol6_i386_latest_archive
	ntp-doc-4.2.6p5-2.el6_6.noarch.rpm	0c8320610b62e9d430aaae07fdd0ead45f962e9c71ec4459578a08ab6c509355	ELSA-2018-3854	ol6_u6_i386_patch
	ntp-perl-4.2.6p5-2.el6_6.i686.rpm	c35f4f05c9c2072bd64edc4a8f783e13ff71c54c060c7e8fd638d1eeb4383924	ELSA-2018-3854	ol6_i386_latest_archive
	ntp-perl-4.2.6p5-2.el6_6.i686.rpm	c35f4f05c9c2072bd64edc4a8f783e13ff71c54c060c7e8fd638d1eeb4383924	ELSA-2018-3854	ol6_u6_i386_patch
	ntpdate-4.2.6p5-2.el6_6.i686.rpm	093342dbdf5dd4f99d81db917ecfb4dcf54cd0fca7812805789572d5d19721d2	ELSA-2018-3854	ol6_i386_latest_archive
	ntpdate-4.2.6p5-2.el6_6.i686.rpm	093342dbdf5dd4f99d81db917ecfb4dcf54cd0fca7812805789572d5d19721d2	ELSA-2018-3854	ol6_u6_i386_patch
Oracle Linux 6 (x86_64)	ntp-4.2.6p5-2.el6_6.src.rpm	bbddcf587863c736604995f35bce0937e3d9d7b34fd802906c971464b017b913	ELSA-2018-3854	ol6_u6_x86_64_patch
	ntp-4.2.6p5-2.el6_6.src.rpm	bbddcf587863c736604995f35bce0937e3d9d7b34fd802906c971464b017b913	ELSA-2018-3854	ol6_x86_64_latest_archive
	ntp-4.2.6p5-2.el6_6.x86_64.rpm	188bf3bb51c182f41a5addb0069a2676c6f3aea36d0a2abb4d62d93f506f82f7	ELSA-2018-3854	ol6_u6_x86_64_patch
	ntp-4.2.6p5-2.el6_6.x86_64.rpm	188bf3bb51c182f41a5addb0069a2676c6f3aea36d0a2abb4d62d93f506f82f7	ELSA-2018-3854	ol6_x86_64_latest_archive
	ntp-doc-4.2.6p5-2.el6_6.noarch.rpm	0c8320610b62e9d430aaae07fdd0ead45f962e9c71ec4459578a08ab6c509355	ELSA-2018-3854	ol6_u6_x86_64_patch
	ntp-doc-4.2.6p5-2.el6_6.noarch.rpm	0c8320610b62e9d430aaae07fdd0ead45f962e9c71ec4459578a08ab6c509355	ELSA-2018-3854	ol6_x86_64_latest_archive
	ntp-perl-4.2.6p5-2.el6_6.x86_64.rpm	6fdd65c49799396fddd5d590e820d3f6d4b8ede69bd6773595c2c303d32acce6	ELSA-2018-3854	ol6_u6_x86_64_patch
	ntp-perl-4.2.6p5-2.el6_6.x86_64.rpm	6fdd65c49799396fddd5d590e820d3f6d4b8ede69bd6773595c2c303d32acce6	ELSA-2018-3854	ol6_x86_64_latest_archive
	ntpdate-4.2.6p5-2.el6_6.x86_64.rpm	40b552e738300c462bd1a7896750b848a16e4a474e8566313cf2aebd7328e520	ELSA-2018-3854	ol6_u6_x86_64_patch
	ntpdate-4.2.6p5-2.el6_6.x86_64.rpm	40b552e738300c462bd1a7896750b848a16e4a474e8566313cf2aebd7328e520	ELSA-2018-3854	ol6_x86_64_latest_archive
Oracle Linux 7 (x86_64)	ntp-4.2.6p5-19.el7_0.src.rpm	14b6588d144f5b609029fdf764e0d7e926405204bfe2607f82289eec8723549e	ELBA-2022-9435	ol7_x86_64_latest_archive
	ntp-4.2.6p5-19.el7_0.src.rpm	14b6588d144f5b609029fdf764e0d7e926405204bfe2607f82289eec8723549e	ELBA-2022-9435	ol7_x86_64_optional_archive
	ntp-4.2.6p5-19.el7_0.src.rpm	14b6588d144f5b609029fdf764e0d7e926405204bfe2607f82289eec8723549e	ELBA-2022-9435	ol7_x86_64_u0_patch
	ntp-4.2.6p5-19.el7_0.src.rpm	14b6588d144f5b609029fdf764e0d7e926405204bfe2607f82289eec8723549e	ELBA-2022-9435	ol7_x86_64_u1_base
	ntp-4.2.6p5-19.el7_0.x86_64.rpm	cdd531376d5d4d7eaf501ec53cc63b8af1ddd7a0f4435c130a0fb0acb474453e	ELBA-2022-9435	ol7_x86_64_latest_archive
	ntp-4.2.6p5-19.el7_0.x86_64.rpm	cdd531376d5d4d7eaf501ec53cc63b8af1ddd7a0f4435c130a0fb0acb474453e	ELBA-2022-9435	ol7_x86_64_u0_patch
	ntp-4.2.6p5-19.el7_0.x86_64.rpm	cdd531376d5d4d7eaf501ec53cc63b8af1ddd7a0f4435c130a0fb0acb474453e	ELBA-2022-9435	ol7_x86_64_u1_base
	ntp-doc-4.2.6p5-19.el7_0.noarch.rpm	b7351f86e5550100fc216490699b8b7e8798091b81ccf6601e2cdf5f116c7d36	ELBA-2022-9435	ol7_x86_64_optional_archive
	ntp-perl-4.2.6p5-19.el7_0.noarch.rpm	50cb734469967b14f02940f83188b08045052c65a5bdcd5577e432a7da34a72f	ELBA-2022-9435	ol7_x86_64_optional_archive
	ntpdate-4.2.6p5-19.el7_0.x86_64.rpm	b99f4cccfa1f8cc50ebd94be0a94763fa953787cf1faeea9b61019e524ee504d	ELBA-2022-9435	ol7_x86_64_latest_archive
	ntpdate-4.2.6p5-19.el7_0.x86_64.rpm	b99f4cccfa1f8cc50ebd94be0a94763fa953787cf1faeea9b61019e524ee504d	ELBA-2022-9435	ol7_x86_64_u0_patch
	ntpdate-4.2.6p5-19.el7_0.x86_64.rpm	b99f4cccfa1f8cc50ebd94be0a94763fa953787cf1faeea9b61019e524ee504d	ELBA-2022-9435	ol7_x86_64_u1_base
	sntp-4.2.6p5-19.el7_0.x86_64.rpm	440dc9e9fab5ccd79672cbc7189ae92cf600cc0dcad5b834056a6e623fb58cf1	ELBA-2022-9435	ol7_x86_64_optional_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team