ELSA-2015-1459

ELSA-2015-1459 - ntp security, bug fix, and enhancement update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2015-07-28

Description

[4.2.6p5-5]
- reject packets without MAC when authentication is enabled (CVE-2015-1798)
- protect symmetric associations with symmetric key against DoS attack
(CVE-2015-1799)
- fix generation of MD5 keys with ntp-keygen on big-endian systems
(CVE-2015-3405)
- log when stepping clock for leap second or ignoring it with -x (#1204625)

[4.2.6p5-4]
- fix typos in ntpd man page (#1194463)

Related CVEs

CVE-2015-3405

CVE-2014-9297

CVE-2014-9298

CVE-2015-1798

CVE-2015-1799

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	ntp-4.2.6p5-5.el6.src.rpm	cb292daf9ca4666c225b19fcc9df6f333375b094a25743221cd6aab1747702a9	ELSA-2018-3854	ol6_i386_latest_archive
	ntp-4.2.6p5-5.el6.src.rpm	cb292daf9ca4666c225b19fcc9df6f333375b094a25743221cd6aab1747702a9	ELSA-2018-3854	ol6_u7_i386_base
	ntp-4.2.6p5-5.el6.i686.rpm	42fc3703ee25b0cd621e147a0ddbd6bf911f51fd53e6cd4702457946a7f14697	ELSA-2018-3854	ol6_i386_latest_archive
	ntp-4.2.6p5-5.el6.i686.rpm	42fc3703ee25b0cd621e147a0ddbd6bf911f51fd53e6cd4702457946a7f14697	ELSA-2018-3854	ol6_u7_i386_base
	ntp-doc-4.2.6p5-5.el6.noarch.rpm	ce1e984cafa8f0aa2b1eb2c422cbddbbef0b1cf31bee3656b19dad4e624c1e33	ELSA-2018-3854	ol6_i386_latest_archive
	ntp-doc-4.2.6p5-5.el6.noarch.rpm	ce1e984cafa8f0aa2b1eb2c422cbddbbef0b1cf31bee3656b19dad4e624c1e33	ELSA-2018-3854	ol6_u7_i386_base
	ntp-perl-4.2.6p5-5.el6.i686.rpm	b62fa375bb8faed18cf17afc5d965a584cc2a5d821ac622279ffb72d45bc1afb	ELSA-2018-3854	ol6_i386_latest_archive
	ntp-perl-4.2.6p5-5.el6.i686.rpm	b62fa375bb8faed18cf17afc5d965a584cc2a5d821ac622279ffb72d45bc1afb	ELSA-2018-3854	ol6_u7_i386_base
	ntpdate-4.2.6p5-5.el6.i686.rpm	1abad7f385ef549dd0fec235fff079fd94095b551ec1ef7bdc3034e3f9583d7d	ELSA-2018-3854	ol6_i386_latest_archive
	ntpdate-4.2.6p5-5.el6.i686.rpm	1abad7f385ef549dd0fec235fff079fd94095b551ec1ef7bdc3034e3f9583d7d	ELSA-2018-3854	ol6_u7_i386_base
Oracle Linux 6 (x86_64)	ntp-4.2.6p5-5.el6.src.rpm	cb292daf9ca4666c225b19fcc9df6f333375b094a25743221cd6aab1747702a9	ELSA-2018-3854	ol6_u7_x86_64_base
	ntp-4.2.6p5-5.el6.src.rpm	cb292daf9ca4666c225b19fcc9df6f333375b094a25743221cd6aab1747702a9	ELSA-2018-3854	ol6_x86_64_latest_archive
	ntp-4.2.6p5-5.el6.x86_64.rpm	0fe13b1fedf1ed1c39ec0712c515cdef34b0dad9c1aae3bb880d8655f8a2994e	ELSA-2018-3854	exadata_dbserver_12.1.2.1.3_x86_64_base
	ntp-4.2.6p5-5.el6.x86_64.rpm	0fe13b1fedf1ed1c39ec0712c515cdef34b0dad9c1aae3bb880d8655f8a2994e	ELSA-2018-3854	exadata_dbserver_12.1.2.2.0_x86_64_base
	ntp-4.2.6p5-5.el6.x86_64.rpm	0fe13b1fedf1ed1c39ec0712c515cdef34b0dad9c1aae3bb880d8655f8a2994e	ELSA-2018-3854	ol6_u7_x86_64_base
	ntp-4.2.6p5-5.el6.x86_64.rpm	0fe13b1fedf1ed1c39ec0712c515cdef34b0dad9c1aae3bb880d8655f8a2994e	ELSA-2018-3854	ol6_x86_64_latest_archive
	ntp-doc-4.2.6p5-5.el6.noarch.rpm	ce1e984cafa8f0aa2b1eb2c422cbddbbef0b1cf31bee3656b19dad4e624c1e33	ELSA-2018-3854	ol6_u7_x86_64_base
	ntp-doc-4.2.6p5-5.el6.noarch.rpm	ce1e984cafa8f0aa2b1eb2c422cbddbbef0b1cf31bee3656b19dad4e624c1e33	ELSA-2018-3854	ol6_x86_64_latest_archive
	ntp-perl-4.2.6p5-5.el6.x86_64.rpm	016e20691b388adb6cbd99e81149f8ffd8f0a5e74aef02794f0b01c0f4ab2cf0	ELSA-2018-3854	ol6_u7_x86_64_base
	ntp-perl-4.2.6p5-5.el6.x86_64.rpm	016e20691b388adb6cbd99e81149f8ffd8f0a5e74aef02794f0b01c0f4ab2cf0	ELSA-2018-3854	ol6_x86_64_latest_archive
	ntpdate-4.2.6p5-5.el6.x86_64.rpm	daf8bba6224d70b773966e9d47c07f92de1d7cc745766dcd1a1c2fc210ba603b	ELSA-2018-3854	exadata_dbserver_12.1.2.1.3_x86_64_base
	ntpdate-4.2.6p5-5.el6.x86_64.rpm	daf8bba6224d70b773966e9d47c07f92de1d7cc745766dcd1a1c2fc210ba603b	ELSA-2018-3854	exadata_dbserver_12.1.2.2.0_x86_64_base
	ntpdate-4.2.6p5-5.el6.x86_64.rpm	daf8bba6224d70b773966e9d47c07f92de1d7cc745766dcd1a1c2fc210ba603b	ELSA-2018-3854	ol6_u7_x86_64_base
	ntpdate-4.2.6p5-5.el6.x86_64.rpm	daf8bba6224d70b773966e9d47c07f92de1d7cc745766dcd1a1c2fc210ba603b	ELSA-2018-3854	ol6_x86_64_latest_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team