ELSA-2018-3854

ELSA-2018-3854 - ntp security update

Type:	SECURITY
Severity:	LOW
Release Date:	2018-12-19

Description

[4.2.6p5-15.0.1]
- add disable monitor to default ntp.conf [CVE-2013-5211]

[4.2.6p5-15]
- fix buffer overflow in parsing of address in ntpq and ntpdc (CVE-2018-12327)

[4.2.6p5-14]
- fix CVE-2016-7429 patch to work correctly on multicast client (#1422973)

[4.2.6p5-13]
- fix buffer overflow in datum refclock driver (CVE-2017-6462)
- fix crash with invalid unpeer command (CVE-2017-6463)
- fix potential crash with invalid server command (CVE-2017-6464)

Related CVEs

CVE-2018-12327

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	ntp-4.2.6p5-15.0.1.el6_10.src.rpm	cb52600bf38ef3a0af02b722b5315b5b	-
	ntp-4.2.6p5-15.0.1.el6_10.i686.rpm	4b3bf353f5aa92e6f90be50c75df0ef1	-
	ntp-doc-4.2.6p5-15.0.1.el6_10.noarch.rpm	72c0add6293f0e7219f31f9842014e29	-
	ntp-perl-4.2.6p5-15.0.1.el6_10.i686.rpm	079422938be0c3f78816ed95dc120df7	-
	ntpdate-4.2.6p5-15.0.1.el6_10.i686.rpm	54e4e5ca5fb754c25e4f4e66bcfecc33	-
Oracle Linux 6 (x86_64)	ntp-4.2.6p5-15.0.1.el6_10.src.rpm	cb52600bf38ef3a0af02b722b5315b5b	-
	ntp-4.2.6p5-15.0.1.el6_10.x86_64.rpm	09b557266ef6fef7b64dce609f5bf4c5	-
	ntp-doc-4.2.6p5-15.0.1.el6_10.noarch.rpm	72c0add6293f0e7219f31f9842014e29	-
	ntp-perl-4.2.6p5-15.0.1.el6_10.x86_64.rpm	980f2b4e8f7e2e759b5ea303403a9fd6	-
	ntpdate-4.2.6p5-15.0.1.el6_10.x86_64.rpm	f4c8589c887c4f3c5fcc6a2a499569b9	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team