ELSA-2019-2077

ELSA-2019-2077 - ntp security, bug fix, and enhancement update

Type:	SECURITY
Impact:	LOW
Release Date:	2019-08-13

Description

[4.2.6p5-29.0.1]
- Bump release to avoid ULN conflict with Oracle modified errata.

[4.2.6p5-29]
- fix CVE-2016-7429 patch to restore default ttl configuration (#1550637)
- fix buffer overflow in parsing of address in ntpq and ntpdc (CVE-2018-12327)
- fix crash in parsing of received address in ntpq (#1616250)
- avoid reading freed memory after disabling netlink socket (#1555401)
- dont disable netlink socket on ENOBUFS error (#1555413)
- replace ntpstat with shell script using ntpq and supporting chrony (#1592871)

Related CVEs

CVE-2018-12327

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	ntp-4.2.6p5-29.0.1.el7.src.rpm	ab741b1a83e32e8d62ec8b690127062b3f8ec194dc6187e14680acc6a72b2b78	ELBA-2022-9435	ol7_aarch64_beta
	ntp-4.2.6p5-29.0.1.el7.src.rpm	ab741b1a83e32e8d62ec8b690127062b3f8ec194dc6187e14680acc6a72b2b78	ELBA-2022-9435	ol7_aarch64_latest
	ntp-4.2.6p5-29.0.1.el7.src.rpm	ab741b1a83e32e8d62ec8b690127062b3f8ec194dc6187e14680acc6a72b2b78	ELBA-2022-9435	ol7_aarch64_optional_beta
	ntp-4.2.6p5-29.0.1.el7.src.rpm	ab741b1a83e32e8d62ec8b690127062b3f8ec194dc6187e14680acc6a72b2b78	ELBA-2022-9435	ol7_aarch64_u7_base
	ntp-4.2.6p5-29.0.1.el7.src.rpm	ab741b1a83e32e8d62ec8b690127062b3f8ec194dc6187e14680acc6a72b2b78	ELBA-2022-9435	ol7_aarch64_u8_base
	ntp-4.2.6p5-29.0.1.el7.aarch64.rpm	ad69254e8b371d6642dd44f88b119d0af76deee0e8a22a7630077aadbdcfa3fd	ELBA-2022-9435	ol7_aarch64_beta
	ntp-4.2.6p5-29.0.1.el7.aarch64.rpm	ad69254e8b371d6642dd44f88b119d0af76deee0e8a22a7630077aadbdcfa3fd	ELBA-2022-9435	ol7_aarch64_latest
	ntp-4.2.6p5-29.0.1.el7.aarch64.rpm	ad69254e8b371d6642dd44f88b119d0af76deee0e8a22a7630077aadbdcfa3fd	ELBA-2022-9435	ol7_aarch64_u7_base
	ntp-4.2.6p5-29.0.1.el7.aarch64.rpm	ad69254e8b371d6642dd44f88b119d0af76deee0e8a22a7630077aadbdcfa3fd	ELBA-2022-9435	ol7_aarch64_u8_base
	ntp-doc-4.2.6p5-29.0.1.el7.noarch.rpm	c4a8fbdc4df30df54eefce107cc90c189265719bf86d1e8ffff9e1302d57fcce	ELBA-2022-9435	ol7_aarch64_optional_beta
	ntp-doc-4.2.6p5-29.0.1.el7.noarch.rpm	c4a8fbdc4df30df54eefce107cc90c189265719bf86d1e8ffff9e1302d57fcce	ELBA-2022-9435	ol7_aarch64_optional_latest
	ntp-perl-4.2.6p5-29.0.1.el7.noarch.rpm	34d74e095fccd5e53cda53a51f05536931233bcd5d49d546cea89ed504608687	ELBA-2022-9435	ol7_aarch64_optional_beta
	ntp-perl-4.2.6p5-29.0.1.el7.noarch.rpm	34d74e095fccd5e53cda53a51f05536931233bcd5d49d546cea89ed504608687	ELBA-2022-9435	ol7_aarch64_optional_latest
	ntpdate-4.2.6p5-29.0.1.el7.aarch64.rpm	75789a8336ec3db8505e02bf509bd20b3cfd987169bcf9719c9f842d02c9d3a3	ELBA-2022-9435	ol7_aarch64_beta
	ntpdate-4.2.6p5-29.0.1.el7.aarch64.rpm	75789a8336ec3db8505e02bf509bd20b3cfd987169bcf9719c9f842d02c9d3a3	ELBA-2022-9435	ol7_aarch64_latest
	ntpdate-4.2.6p5-29.0.1.el7.aarch64.rpm	75789a8336ec3db8505e02bf509bd20b3cfd987169bcf9719c9f842d02c9d3a3	ELBA-2022-9435	ol7_aarch64_u7_base
	ntpdate-4.2.6p5-29.0.1.el7.aarch64.rpm	75789a8336ec3db8505e02bf509bd20b3cfd987169bcf9719c9f842d02c9d3a3	ELBA-2022-9435	ol7_aarch64_u8_base
	sntp-4.2.6p5-29.0.1.el7.aarch64.rpm	0eb4fe26c129ee0f99bb607c8a3cde4eaad09a1f2c409befcb678ff0e933c674	ELBA-2022-9435	ol7_aarch64_optional_beta
	sntp-4.2.6p5-29.0.1.el7.aarch64.rpm	0eb4fe26c129ee0f99bb607c8a3cde4eaad09a1f2c409befcb678ff0e933c674	ELBA-2022-9435	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	ntp-4.2.6p5-29.0.1.el7.src.rpm	ab741b1a83e32e8d62ec8b690127062b3f8ec194dc6187e14680acc6a72b2b78	ELBA-2022-9435	ol7_x86_64_beta
	ntp-4.2.6p5-29.0.1.el7.src.rpm	ab741b1a83e32e8d62ec8b690127062b3f8ec194dc6187e14680acc6a72b2b78	ELBA-2022-9435	ol7_x86_64_latest
	ntp-4.2.6p5-29.0.1.el7.src.rpm	ab741b1a83e32e8d62ec8b690127062b3f8ec194dc6187e14680acc6a72b2b78	ELBA-2022-9435	ol7_x86_64_optional_beta
	ntp-4.2.6p5-29.0.1.el7.src.rpm	ab741b1a83e32e8d62ec8b690127062b3f8ec194dc6187e14680acc6a72b2b78	ELBA-2022-9435	ol7_x86_64_u7_base
	ntp-4.2.6p5-29.0.1.el7.src.rpm	ab741b1a83e32e8d62ec8b690127062b3f8ec194dc6187e14680acc6a72b2b78	ELBA-2022-9435	ol7_x86_64_u8_base
	ntp-4.2.6p5-29.0.1.el7.x86_64.rpm	c0dca10480c136aac94b8b137f716aebc47a5ee44d607c6e61ab9b4cec563440	ELBA-2022-9435	ol7_x86_64_beta
	ntp-4.2.6p5-29.0.1.el7.x86_64.rpm	c0dca10480c136aac94b8b137f716aebc47a5ee44d607c6e61ab9b4cec563440	ELBA-2022-9435	ol7_x86_64_latest
	ntp-4.2.6p5-29.0.1.el7.x86_64.rpm	c0dca10480c136aac94b8b137f716aebc47a5ee44d607c6e61ab9b4cec563440	ELBA-2022-9435	ol7_x86_64_u7_base
	ntp-4.2.6p5-29.0.1.el7.x86_64.rpm	c0dca10480c136aac94b8b137f716aebc47a5ee44d607c6e61ab9b4cec563440	ELBA-2022-9435	ol7_x86_64_u8_base
	ntp-doc-4.2.6p5-29.0.1.el7.noarch.rpm	c4a8fbdc4df30df54eefce107cc90c189265719bf86d1e8ffff9e1302d57fcce	ELBA-2022-9435	ol7_x86_64_optional_beta
	ntp-doc-4.2.6p5-29.0.1.el7.noarch.rpm	c4a8fbdc4df30df54eefce107cc90c189265719bf86d1e8ffff9e1302d57fcce	ELBA-2022-9435	ol7_x86_64_optional_latest
	ntp-perl-4.2.6p5-29.0.1.el7.noarch.rpm	34d74e095fccd5e53cda53a51f05536931233bcd5d49d546cea89ed504608687	ELBA-2022-9435	ol7_x86_64_optional_beta
	ntp-perl-4.2.6p5-29.0.1.el7.noarch.rpm	34d74e095fccd5e53cda53a51f05536931233bcd5d49d546cea89ed504608687	ELBA-2022-9435	ol7_x86_64_optional_latest
	ntpdate-4.2.6p5-29.0.1.el7.x86_64.rpm	92890b91083261b631b8e8533088259d10b08f1dcd2e6bdf9cabf5d1c320d877	ELBA-2022-9435	ol7_x86_64_beta
	ntpdate-4.2.6p5-29.0.1.el7.x86_64.rpm	92890b91083261b631b8e8533088259d10b08f1dcd2e6bdf9cabf5d1c320d877	ELBA-2022-9435	ol7_x86_64_latest
	ntpdate-4.2.6p5-29.0.1.el7.x86_64.rpm	92890b91083261b631b8e8533088259d10b08f1dcd2e6bdf9cabf5d1c320d877	ELBA-2022-9435	ol7_x86_64_u7_base
	ntpdate-4.2.6p5-29.0.1.el7.x86_64.rpm	92890b91083261b631b8e8533088259d10b08f1dcd2e6bdf9cabf5d1c320d877	ELBA-2022-9435	ol7_x86_64_u8_base
	sntp-4.2.6p5-29.0.1.el7.x86_64.rpm	3c16f2b7fcfef04cff1db25aee6187196e87006f5518ed48b3c94894b8436305	ELBA-2022-9435	ol7_x86_64_optional_beta
	sntp-4.2.6p5-29.0.1.el7.x86_64.rpm	3c16f2b7fcfef04cff1db25aee6187196e87006f5518ed48b3c94894b8436305	ELBA-2022-9435	ol7_x86_64_optional_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team