ntp-4.2.2p1-9.2.1AXS3

エラータID: AXSA:2009-58:02

Release date: 
Wednesday, May 27, 2009 - 13:00
Subject: 
ntp-4.2.2p1-9.2.1AXS3
Affected Channels: 
Asianux Server 3 for x86
Asianux Server 3 for x86_64
Severity: 
High
Description: 

The Network Time Protocol (NTP) is used to synchronize a computer's time with another reference time source. The ntp package contains utilities and daemons that will synchronize your computer's time to Coordinated Universal Time (UTC) via the NTP protocol and NTP servers. The ntp package includes ntpdate (a program for retrieving the date and time from remote machines via a network) and ntpd (a daemon which continuously adjusts system time).
Install the ntp package if you need tools for keeping your system's time synchronized via the NTP protocol.
Fixed bugs:
CVE-2009-0159
Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.
CVE-2009-1252
Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. ntp-4.2.2p1-9.2.1AXS3.src.rpm
    MD5: 7522da0b8ba4d72cc31b94850f87a7dd
    SHA-256: 30a0b0aa4f8026bf11fcfa73481f434bcc9aad82135f0eac7e37bb7e3735099d
    Size: 2.51 MB

Asianux Server 3 for x86
  1. ntp-4.2.2p1-9.2.1AXS3.i386.rpm
    MD5: 6d905ef338acf1d53d820035ea339d4b
    SHA-256: 52dd6b470c64f77aac3875e1d16fd867c737b4bc18e247fef9202ae466ae1fc2
    Size: 1.33 MB

Asianux Server 3 for x86_64
  1. ntp-4.2.2p1-9.2.1AXS3.x86_64.rpm
    MD5: 15639eb34ddad49088289b91081aedb2
    SHA-256: 0ccc09cfa135053fefd237024e57ea7f38ee376961de427fed8bcdcbf866e595
    Size: 1.34 MB