ELSA-2020-2663

ELSA-2020-2663 - ntp security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2020-06-24

Description

[4.2.6p5-29.0.1]
- Bump release to avoid ULN conflict with Oracle modified errata.

[4.2.6p5-29.el7_8.2]
- don't update transmission time on invalid response (CVE-2020-11868)
- randomize transmit timestamp in client requests (CVE-?, #1813787)

Related CVEs

CVE-2020-11868

CVE-2020-13817

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	ntp-4.2.6p5-29.0.1.el7_8.2.src.rpm	a7684f5ea39db98f15f8b45928a61860cb5bc43f1c7b2a1312eb8f001b9ea0db	ELBA-2022-9435	ol7_aarch64_latest
	ntp-4.2.6p5-29.0.1.el7_8.2.src.rpm	a7684f5ea39db98f15f8b45928a61860cb5bc43f1c7b2a1312eb8f001b9ea0db	ELBA-2022-9435	ol7_aarch64_optional_latest
	ntp-4.2.6p5-29.0.1.el7_8.2.src.rpm	a7684f5ea39db98f15f8b45928a61860cb5bc43f1c7b2a1312eb8f001b9ea0db	ELBA-2022-9435	ol7_aarch64_u9_base
	ntp-4.2.6p5-29.0.1.el7_8.2.aarch64.rpm	992e129e2612639f917f1193c7502f006d9b7295762f14df8cc90e01ea5ae1f7	ELBA-2022-9435	ol7_aarch64_latest
	ntp-4.2.6p5-29.0.1.el7_8.2.aarch64.rpm	992e129e2612639f917f1193c7502f006d9b7295762f14df8cc90e01ea5ae1f7	ELBA-2022-9435	ol7_aarch64_u9_base
	ntp-doc-4.2.6p5-29.0.1.el7_8.2.noarch.rpm	6c80ecef04378fe68762eac1e95cbf4a31e5621ce9b9ff6d00ba965b8d382ba4	ELBA-2022-9435	ol7_aarch64_optional_latest
	ntp-perl-4.2.6p5-29.0.1.el7_8.2.noarch.rpm	e7dd664455fb866a68dc8cefd58ee48c2533be6efe938be97336b90644df7702	ELBA-2022-9435	ol7_aarch64_optional_latest
	ntpdate-4.2.6p5-29.0.1.el7_8.2.aarch64.rpm	106afcdd0deb61ef8163f831698c6ceb11cc23255bfddd1b4626991673a61e5e	ELBA-2022-9435	ol7_aarch64_latest
	ntpdate-4.2.6p5-29.0.1.el7_8.2.aarch64.rpm	106afcdd0deb61ef8163f831698c6ceb11cc23255bfddd1b4626991673a61e5e	ELBA-2022-9435	ol7_aarch64_u9_base
	sntp-4.2.6p5-29.0.1.el7_8.2.aarch64.rpm	ed6dba5cef55de3a92f5ca206dad65e5415534e6767bb5a807e7f3890b42dc97	ELBA-2022-9435	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	ntp-4.2.6p5-29.0.1.el7_8.2.src.rpm	a7684f5ea39db98f15f8b45928a61860cb5bc43f1c7b2a1312eb8f001b9ea0db	ELBA-2022-9435	ol7_x86_64_latest
	ntp-4.2.6p5-29.0.1.el7_8.2.src.rpm	a7684f5ea39db98f15f8b45928a61860cb5bc43f1c7b2a1312eb8f001b9ea0db	ELBA-2022-9435	ol7_x86_64_optional_latest
	ntp-4.2.6p5-29.0.1.el7_8.2.src.rpm	a7684f5ea39db98f15f8b45928a61860cb5bc43f1c7b2a1312eb8f001b9ea0db	ELBA-2022-9435	ol7_x86_64_u8_patch
	ntp-4.2.6p5-29.0.1.el7_8.2.src.rpm	a7684f5ea39db98f15f8b45928a61860cb5bc43f1c7b2a1312eb8f001b9ea0db	ELBA-2022-9435	ol7_x86_64_u9_base
	ntp-4.2.6p5-29.0.1.el7_8.2.x86_64.rpm	aea3f4d5f5a24adf7ca3d854ad43ba1c529b4f72e1c7eb9af7847d03abe4c631	ELBA-2022-9435	ol7_x86_64_latest
	ntp-4.2.6p5-29.0.1.el7_8.2.x86_64.rpm	aea3f4d5f5a24adf7ca3d854ad43ba1c529b4f72e1c7eb9af7847d03abe4c631	ELBA-2022-9435	ol7_x86_64_u8_patch
	ntp-4.2.6p5-29.0.1.el7_8.2.x86_64.rpm	aea3f4d5f5a24adf7ca3d854ad43ba1c529b4f72e1c7eb9af7847d03abe4c631	ELBA-2022-9435	ol7_x86_64_u9_base
	ntp-doc-4.2.6p5-29.0.1.el7_8.2.noarch.rpm	6c80ecef04378fe68762eac1e95cbf4a31e5621ce9b9ff6d00ba965b8d382ba4	ELBA-2022-9435	ol7_x86_64_optional_latest
	ntp-perl-4.2.6p5-29.0.1.el7_8.2.noarch.rpm	e7dd664455fb866a68dc8cefd58ee48c2533be6efe938be97336b90644df7702	ELBA-2022-9435	ol7_x86_64_optional_latest
	ntpdate-4.2.6p5-29.0.1.el7_8.2.x86_64.rpm	942b0b1603faf1c4a5d9c03bb7ae46fc572c66527c276f64a2c545ec6817b982	ELBA-2022-9435	ol7_x86_64_latest
	ntpdate-4.2.6p5-29.0.1.el7_8.2.x86_64.rpm	942b0b1603faf1c4a5d9c03bb7ae46fc572c66527c276f64a2c545ec6817b982	ELBA-2022-9435	ol7_x86_64_u8_patch
	ntpdate-4.2.6p5-29.0.1.el7_8.2.x86_64.rpm	942b0b1603faf1c4a5d9c03bb7ae46fc572c66527c276f64a2c545ec6817b982	ELBA-2022-9435	ol7_x86_64_u9_base
	sntp-4.2.6p5-29.0.1.el7_8.2.x86_64.rpm	79983e8b21143fb5aabef22cbb3649a4b363d3bea0c016c86627236deb5f7163	ELBA-2022-9435	ol7_x86_64_optional_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team