OVMSA-2018-0290

OVMSA-2018-0290 - ntp security update

Type:	SECURITY
Impact:	LOW
Release Date:	2018-12-19

Description

[4.2.6p5-15.0.1]
- add disable monitor to default ntp.conf [CVE-2013-5211]

[4.2.6p5-15]
- fix buffer overflow in parsing of address in ntpq and ntpdc (CVE-2018-12327)

[4.2.6p5-14]
- fix CVE-2016-7429 patch to work correctly on multicast client (#1422973)

[4.2.6p5-13]
- fix buffer overflow in datum refclock driver (CVE-2017-6462)
- fix crash with invalid unpeer command (CVE-2017-6463)
- fix potential crash with invalid server command (CVE-2017-6464)

Related CVEs

CVE-2018-12327

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle VM 3.3 (x86_64)	ntp-4.2.6p5-15.0.1.el6_10.src.rpm	2ed7e009d764a26f9d92674d91886bb3d17f0bf2ab27bb39ad302d0b8cd566ac	-	ovm3_x86_64_3.3_patch
	ntp-4.2.6p5-15.0.1.el6_10.x86_64.rpm	3b10dccce47ba41ca6bfc5800e7547971ba2da92d50223d99883395795effb09	-	ovm3_x86_64_3.3_patch
	ntpdate-4.2.6p5-15.0.1.el6_10.x86_64.rpm	06c43b99c1033fbf638b71ad355ad7e2e854fe86e298fc33bb72deb6645c51b8	-	ovm3_x86_64_3.3_patch
Oracle VM 3.4 (x86_64)	ntp-4.2.6p5-15.0.1.el6_10.src.rpm	2ed7e009d764a26f9d92674d91886bb3d17f0bf2ab27bb39ad302d0b8cd566ac	-	ovm34_x86_64_latest
	ntp-4.2.6p5-15.0.1.el6_10.x86_64.rpm	3b10dccce47ba41ca6bfc5800e7547971ba2da92d50223d99883395795effb09	-	ovm34_x86_64_latest
	ntpdate-4.2.6p5-15.0.1.el6_10.x86_64.rpm	06c43b99c1033fbf638b71ad355ad7e2e854fe86e298fc33bb72deb6645c51b8	-	ovm34_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team