OVMSA-2018-0290

OVMSA-2018-0290 - ntp security update

Type:	SECURITY
Severity:	LOW
Release Date:	2018-12-19

Description

[4.2.6p5-15.0.1]
- add disable monitor to default ntp.conf [CVE-2013-5211]

[4.2.6p5-15]
- fix buffer overflow in parsing of address in ntpq and ntpdc (CVE-2018-12327)

[4.2.6p5-14]
- fix CVE-2016-7429 patch to work correctly on multicast client (#1422973)

[4.2.6p5-13]
- fix buffer overflow in datum refclock driver (CVE-2017-6462)
- fix crash with invalid unpeer command (CVE-2017-6463)
- fix potential crash with invalid server command (CVE-2017-6464)

Related CVEs

CVE-2018-12327

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle VM 3.3 (x86_64)	ntp-4.2.6p5-15.0.1.el6_10.src.rpm	cb52600bf38ef3a0af02b722b5315b5b	-
	ntp-4.2.6p5-15.0.1.el6_10.x86_64.rpm	09b557266ef6fef7b64dce609f5bf4c5	-
	ntpdate-4.2.6p5-15.0.1.el6_10.x86_64.rpm	f4c8589c887c4f3c5fcc6a2a499569b9	-
Oracle VM 3.4 (x86_64)	ntp-4.2.6p5-15.0.1.el6_10.src.rpm	cb52600bf38ef3a0af02b722b5315b5b	-
	ntp-4.2.6p5-15.0.1.el6_10.x86_64.rpm	09b557266ef6fef7b64dce609f5bf4c5	-
	ntpdate-4.2.6p5-15.0.1.el6_10.x86_64.rpm	f4c8589c887c4f3c5fcc6a2a499569b9	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team