ntp 보안 업데이트
업데이트 : 2015.08.16
이름 : ntp-1:4.2.6p5-5.an2
벤더 : AnNyung Packaging Team
설명 :
The Network Time Protocol (NTP) is used to synchronize a computer's
time with another reference time source. This package includes ntpd
(a daemon which continuously adjusts system time) and utilities used
to query and configure the ntpd daemon.
Perl scripts ntp-wait and ntptrace are in the ntp-perl package and
the ntpdate program is in the ntpdate package. The documentation is
in the ntp-doc package.
변경사항
- security issues:
. CVE-2015-1798 reject packets without MAC when authentication is enabled
. CVE-2015-1799 protect symmetric associations with symmetric key against DoS attack
. CVE-2015-3405 fix generation of MD5 keys with ntp-keygen on big-endian systems
. CVE-2014-9297 validate lengths of values in extension fields
. CVE-2014-9298 drop packets with spoofed source address ::1
업데이트 패키지
SRPMS:
. ntp-4.2.6p5-5.an2.src.rpm
x86_64:
. ntp-perl-4.2.6p5-5.an2.x86_64.rpm
. ntp-4.2.6p5-5.an2.x86_64.rpm
. ntpdate-4.2.6p5-5.an2.x86_64.rpm
i686:
. ntpdate-4.2.6p5-5.an2.i686.rpm
. ntp-4.2.6p5-5.an2.i686.rpm
. ntp-perl-4.2.6p5-5.an2.i686.rpm
noarch:
. ntp-doc-4.2.6p5-5.an2.noarch.rpm
. ntp-doc-4.2.6p5-5.an2.noarch.rpm
|