ntp 보안 업데이트
업데이트 : 2016.06.01
이름 : ntp-1:4.2.6p5-10.an2.1
벤더 : AnNyung Packaging Team
설명 :
The Network Time Protocol (NTP) is used to synchronize a computer's
time with another reference time source. This package includes ntpd
(a daemon which continuously adjusts system time) and utilities used
to query and configure the ntpd daemon.
Perl scripts ntp-wait and ntptrace are in the ntp-perl package and
the ntpdate program is in the ntpdate package. The documentation is
in the ntp-doc package.
변경사항
- security issues:
. CVE-2015-7979 don't allow spoofed packets to demobilize associations
. CVE-2016-1547 don't allow spoofed packets to demobilize associations
. CVE-2016-1548 don't allow spoofed packet to enable symmetric interleaved mode
. CVE-2016-2518 check mode of new source in config command
. CVE-2016-1550 make MAC check resilient against timing attack
업데이트 패키지
SRPMS:
. ntp-4.2.6p5-10.an2.1.src.rpm
x86_64:
. ntpdate-4.2.6p5-10.an2.1.x86_64.rpm
. ntp-perl-4.2.6p5-10.an2.1.x86_64.rpm
. ntp-4.2.6p5-10.an2.1.x86_64.rpm
i686:
. ntp-perl-4.2.6p5-10.an2.1.i686.rpm
. ntpdate-4.2.6p5-10.an2.1.i686.rpm
. ntp-4.2.6p5-10.an2.1.i686.rpm
noarch:
. ntp-doc-4.2.6p5-10.an2.1.noarch.rpm
. ntp-doc-4.2.6p5-10.an2.1.noarch.rpm
|