ntp-4.2.2p1-9.2.2AXS3

エラータID: AXSA:2009-434:03

Release date: 
Thursday, December 10, 2009 - 15:53
Subject: 
ntp-4.2.2p1-9.2.2AXS3
Affected Channels: 
Asianux Server 3 for x86
Asianux Server 3 for x86_64
Severity: 
High
Description: 

The Network Time Protocol (NTP) is used to synchronize a computer's time with another reference time source. The ntp package contains utilities and daemons that will synchronize your computer's time to Coordinated Universal Time (UTC) via the NTP protocol and NTP servers. The ntp package includes ntpdate (a program for retrieving the date and time from remote machines via a network) and ntpd (a daemon which continuously adjusts system time).
Install the ntp package if you need tools for keeping your system's time synchronized via the NTP protocol.
Security bugs fixed with this release:
CVE-2009-3563
No description available at the time of writing; see the CVE link below.

Solution: 

Update packages.

CVEs: 
CVE-2009-3563
ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by using MODE_PRIVATE to send a spoofed (1) request or (2) response packet that triggers a continuous exchange of MODE_PRIVATE error responses between two NTP daemons.


Additional Info: 

N/A

Download: 

SRPMS
  1. ntp-4.2.2p1-9.2.2AXS3.src.rpm
    MD5: 656302c0d64b432ef0b9b853055a67c8
    SHA-256: 7bf1c1f64f3907a0ba562988743f70426bc224110fdf192e5096a4075536b2ef
    Size: 2.50 MB

Asianux Server 3 for x86
  1. ntp-4.2.2p1-9.2.2AXS3.i386.rpm
    MD5: a65f41fb43999ff52b149e24611d885d
    SHA-256: e03ba75884119c8917d5d5aeee1008fa1e029ff919744740922ecc38efa8542a
    Size: 1.32 MB

Asianux Server 3 for x86_64
  1. ntp-4.2.2p1-9.2.2AXS3.x86_64.rpm
    MD5: f094274706c2cff45d65e33e7a9ce1c4
    SHA-256: c4de8b403dc2fd6140ff13c8703bf0cde4fc18a516269b728b31614b830aa6fc
    Size: 1.33 MB