The following updated rpms for Oracle Linux 6 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2016-1141 https://linux.oracle.com/errata/ELSA-2016-1141.html The following updated rpms for Oracle Linux 6 have been uploaded to the Unbreakable Linux Network: i386: ntp-4.2.6p5-10.el6.1.i686.rpm ntp-doc-4.2.6p5-10.el6.1.noarch.rpm ntp-perl-4.2.6p5-10.el6.1.i686.rpm ntpdate-4.2.6p5-10.el6.1.i686.rpm x86_64: ntp-4.2.6p5-10.el6.1.x86_64.rpm ntp-doc-4.2.6p5-10.el6.1.noarch.rpm ntp-perl-4.2.6p5-10.el6.1.x86_64.rpm ntpdate-4.2.6p5-10.el6.1.x86_64.rpm SRPMS: https://oss.oracle.com:443/ol6/SRPMS-updates/ntp-4.2.6p5-10.el6.1.src.rpm Description of changes: [4.2.6p5-10.el6_8.1] - don't allow spoofed packets to demobilize associations (CVE-2015-7979, CVE-2016-1547) - don't allow spoofed packet to enable symmetric interleaved mode (CVE-2016-1548) - check mode of new source in config command (CVE-2016-2518) - make MAC check resilient against timing attack (CVE-2016-1550) . The Oracle Linux Security Advisory ELSA-2016-1142 concerns vulnerabilities in the httpd service and provides essential patches. Discover further details here.. Oracle Linux, NTP Update, Security Advisory, Unbreakable Network, Moderate Severity. . Severity: Important. LinuxSecurity.com Team
Several vulnerabilities were discovered in the ntp package, an implementation of the Network Time Protocol. CVE-2014-9293 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3108-1
This update fixes a denial of service issue if autokey is enabled (default is disabled) and a crash in ntpq.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-5275 2009-05-20 21:38:23 -------------------------------------------------------------------------------- Name : ntp Product : Fedora 9 Version : 4.2.4p7 Release : 1.fc9 URL : http://www.ntp.org Summary : The NTP daemon and utilities Description : The Network Time Protocol (NTP) is used to synchronize a computer's time with another reference time source. This package includes ntpd (a daemon which continuously adjusts system time) and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl package and the ntpdate program is in the ntpdate package. -------------------------------------------------------------------------------- Update Information: This update fixes a denial of service issue if autokey is enabled (default is disabled) and a crash in ntpq. -------------------------------------------------------------------------------- ChangeLog: * Tue May 19 2009 Miroslav Lichvar 4.2.4p7-1.fc9 - update to 4.2.4p7 (CVE-2009-1252, CVE-2009-0159) - don't log STA_MODE changes * Mon Jan 12 2009 Miroslav Lichvar 4.2.4p6-1.fc9 - update to 4.2.4p6 (CVE-2009-0021) * Wed Oct 8 2008 Miroslav Lichvar 4.2.4p5-2.fc9 - don't write drift file upon exit - run ntpq with full path in ntp-wait script * Fri Aug 29 2008 Miroslav Lichvar 4.2.4p5-1 - update to 4.2.4p5 - add support for fast interface updates * Mon Jul 28 2008 Miroslav Lichvar 4.2.4p4-7 - reload resolv.conf after temporary failure in name resolution (#456743) - use clock_gettime - make subpackages for perl scripts and ntpdate (#452097, #456116) -------------------------------------------------------------------------------- References: [ 1 ] Bug #499694 - CVE-2009-1252 ntp: remote arbitrary code execution vulnerability if autokeys is enabled https://bugzilla.redhat.com/show_bug.cgi?id=499694 [ 2 ] Bug #490617 - CVE-2009-0159 ntp: buffer overflow in ntpq https://bugzilla.redhat.com/show_bug.cgi?id=490617 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update ntp' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list
Get the latest Linux and open source security news straight to your inbox.