ntp 보안 업데이트
업데이트 : 2016.05.12
이름 : ntp-1:4.2.6p5-10.an2
벤더 : AnNyung Packaging Team
설명 :
The Network Time Protocol (NTP) is used to synchronize a computer's
time with another reference time source. This package includes ntpd
(a daemon which continuously adjusts system time) and utilities used
to query and configure the ntpd daemon.
Perl scripts ntp-wait and ntptrace are in the ntp-perl package and
the ntpdate program is in the ntpdate package. The documentation is
in the ntp-doc package.
변경사항
- security issues:
. CVE-2015-7977 fix crash with reslist command
. CVE-2015-7978 fix crash with reslist command
. CVE-2015-5194 fix crash with invalid logconfig command
. CVE-2015-5195 fix crash when referencing disabled statistic type
. CVE-2015-5219 don't hang in sntp with crafted reply
. CVE-2015-7691 don't crash with crafted autokey packet
. CVE-2015-7692 don't crash with crafted autokey packet
. CVE-2015-7702 don't crash with crafted autokey packet
. CVE-2015-7701 fix memory leak with autokey
. CVE-2015-7703 don't allow setting driftfile and pidfile remotely
. CVE-2015-7852 don't crash in ntpq with crafted packet
업데이트 패키지
SRPMS:
. ntp-4.2.6p5-10.an2.src.rpm
x86_64:
. ntp-perl-4.2.6p5-10.an2.x86_64.rpm
. ntpdate-4.2.6p5-10.an2.x86_64.rpm
. ntp-4.2.6p5-10.an2.x86_64.rpm
i686:
. ntp-perl-4.2.6p5-10.an2.i686.rpm
. ntp-4.2.6p5-10.an2.i686.rpm
. ntpdate-4.2.6p5-10.an2.i686.rpm
noarch:
. ntp-doc-4.2.6p5-10.an2.noarch.rpm
. ntp-doc-4.2.6p5-10.an2.noarch.rpm
|