Red Hat Product Errata RHSA-2015:2520 - Security Advisory
Issued:
2015-11-26
Updated:
2015-11-26

RHSA-2015:2520 - Security Advisory

Synopsis

Important: ntp security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated ntp packages that fix one security issue are now available for Red
Hat Enterprise Linux 6.5 and 6.6 Extended Update Support.

Red Hat Product Security has rated this update as having Important security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.

Description

The Network Time Protocol (NTP) is used to synchronize a computer's time
with a referenced time source.

It was discovered that ntpd as a client did not correctly check timestamps
in Kiss-of-Death packets. A remote attacker could use this flaw to send a
crafted Kiss-of-Death packet to an ntpd client that would increase the
client's polling interval value, and effectively disable synchronization
with the server. (CVE-2015-7704)

Red Hat would like to thank Aanchal Malhotra, Isaac E. Cohen, and Sharon
Goldberg of Boston University for reporting this issue.

All ntp users are advised to upgrade to these updated packages, which
contain a backported patch to resolve this issue. After installing the
update, the ntpd daemon will restart automatically.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.6 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.6 i386
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.5 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.5 i386
  • Red Hat Enterprise Linux Server - AUS 6.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 6.5 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 6.6 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 6.5 s390x
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.6 ppc64
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.5 ppc64
  • Red Hat Enterprise Linux Server - TUS 6.6 x86_64
  • Red Hat Enterprise Linux Server - TUS 6.5 x86_64
  • Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.6 x86_64
  • Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.6 i386
  • Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.5 x86_64
  • Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.5 i386
  • Red Hat Enterprise Linux EUS Compute Node 6.6 x86_64
  • Red Hat Enterprise Linux EUS Compute Node 6.5 x86_64

Fixes

  • BZ - 1271070 - CVE-2015-7704 ntp: disabling synchronization via crafted KoD packet

Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.6

SRPM
ntp-4.2.6p5-3.el6_6.1.src.rpm SHA-256: 63eac32a4871566bb2e1d699d43a3ef342e72a4c0820cd4090ef0dad3ed126d0
x86_64
ntp-4.2.6p5-3.el6_6.1.x86_64.rpm SHA-256: 7a5c29dc4ada95a1e13d39ec3463e79fe163c65ea34351c41a2776da1a7f69ae
ntp-debuginfo-4.2.6p5-3.el6_6.1.x86_64.rpm SHA-256: 511f96d3f026aaa82fba5ce4dd45e1507b76f84454af782127292bb9f635c3d1
ntp-debuginfo-4.2.6p5-3.el6_6.1.x86_64.rpm SHA-256: 511f96d3f026aaa82fba5ce4dd45e1507b76f84454af782127292bb9f635c3d1
ntp-doc-4.2.6p5-3.el6_6.1.noarch.rpm SHA-256: b3d00403abff1935a360073dbb7b634aa029a225c760a664de1b5e751a5601a0
ntp-perl-4.2.6p5-3.el6_6.1.x86_64.rpm SHA-256: 920346bc0a13b338c5a95bbf72a6c968c2dd6d4dd75e9faa747f69a6c4f7f037
ntpdate-4.2.6p5-3.el6_6.1.x86_64.rpm SHA-256: 563ae7e7f52edce7821f463d8e9a5e47f1ee04440badee3dfc35c9c62133a0f9
i386
ntp-4.2.6p5-3.el6_6.1.i686.rpm SHA-256: 0d07e9edbcb8024dd3e3e3f5f341af64d064dc768a2170eda0651af4c3fefa49
ntp-debuginfo-4.2.6p5-3.el6_6.1.i686.rpm SHA-256: fc07fbe3ac5f3b1aad1f08e0227ce2ffbea43996d2099313066fdf6cd962a2d4
ntp-debuginfo-4.2.6p5-3.el6_6.1.i686.rpm SHA-256: fc07fbe3ac5f3b1aad1f08e0227ce2ffbea43996d2099313066fdf6cd962a2d4
ntp-doc-4.2.6p5-3.el6_6.1.noarch.rpm SHA-256: b3d00403abff1935a360073dbb7b634aa029a225c760a664de1b5e751a5601a0
ntp-perl-4.2.6p5-3.el6_6.1.i686.rpm SHA-256: 566d9a1589014f02951e69f88cf142601c1c5307b57c2b35d92c6c3c5bad1958
ntpdate-4.2.6p5-3.el6_6.1.i686.rpm SHA-256: abec6ed4f42a844beb189ef10d57b6e299e0b97af317c7c5fb19e52c60e08d8d

Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.5

SRPM
ntp-4.2.6p5-2.el6_5.1.src.rpm SHA-256: 804c0ee6d5532214ae0beb958e1983da049673e0e961d21529b97ad70ad74666
x86_64
ntp-4.2.6p5-2.el6_5.1.x86_64.rpm SHA-256: 8713001197a6c524f54fc1f0e7ce8cf7c64d0716236073adb1c4ee420cb6ad47
ntp-debuginfo-4.2.6p5-2.el6_5.1.x86_64.rpm SHA-256: 7756ec3d2db08633fbfd35d7335162badc6488fda01db8f57c9681de70cdcc90
ntpdate-4.2.6p5-2.el6_5.1.x86_64.rpm SHA-256: 50ccba73b10e84c8a89952c0482abddb0ecf474dd1d61902cd1ac5ccd2a72013
i386
ntp-4.2.6p5-2.el6_5.1.i686.rpm SHA-256: e47734a1959d80c7d8d12018b7c3caf2e7bdb9299f79c7902171f47686f784a2
ntp-debuginfo-4.2.6p5-2.el6_5.1.i686.rpm SHA-256: beb814ae5230f5d02db9eba2490559c34f26a0dd434e27312a740f6fc3e54dc3
ntp-debuginfo-4.2.6p5-2.el6_5.1.i686.rpm SHA-256: beb814ae5230f5d02db9eba2490559c34f26a0dd434e27312a740f6fc3e54dc3
ntpdate-4.2.6p5-2.el6_5.1.i686.rpm SHA-256: 9529354c335493c04f22762146b157fb60e6761c4b383f4249232ed6f8de5229

Red Hat Enterprise Linux Server - AUS 6.6

SRPM
ntp-4.2.6p5-3.el6_6.1.src.rpm SHA-256: 63eac32a4871566bb2e1d699d43a3ef342e72a4c0820cd4090ef0dad3ed126d0
x86_64
ntp-4.2.6p5-3.el6_6.1.x86_64.rpm SHA-256: 7a5c29dc4ada95a1e13d39ec3463e79fe163c65ea34351c41a2776da1a7f69ae
ntp-debuginfo-4.2.6p5-3.el6_6.1.x86_64.rpm SHA-256: 511f96d3f026aaa82fba5ce4dd45e1507b76f84454af782127292bb9f635c3d1
ntp-debuginfo-4.2.6p5-3.el6_6.1.x86_64.rpm SHA-256: 511f96d3f026aaa82fba5ce4dd45e1507b76f84454af782127292bb9f635c3d1
ntp-doc-4.2.6p5-3.el6_6.1.noarch.rpm SHA-256: b3d00403abff1935a360073dbb7b634aa029a225c760a664de1b5e751a5601a0
ntp-perl-4.2.6p5-3.el6_6.1.x86_64.rpm SHA-256: 920346bc0a13b338c5a95bbf72a6c968c2dd6d4dd75e9faa747f69a6c4f7f037
ntpdate-4.2.6p5-3.el6_6.1.x86_64.rpm SHA-256: 563ae7e7f52edce7821f463d8e9a5e47f1ee04440badee3dfc35c9c62133a0f9

Red Hat Enterprise Linux Server - AUS 6.5

SRPM
ntp-4.2.6p5-2.el6_5.1.src.rpm SHA-256: 804c0ee6d5532214ae0beb958e1983da049673e0e961d21529b97ad70ad74666
x86_64
ntp-4.2.6p5-2.el6_5.1.x86_64.rpm SHA-256: 8713001197a6c524f54fc1f0e7ce8cf7c64d0716236073adb1c4ee420cb6ad47
ntp-debuginfo-4.2.6p5-2.el6_5.1.x86_64.rpm SHA-256: 7756ec3d2db08633fbfd35d7335162badc6488fda01db8f57c9681de70cdcc90
ntp-debuginfo-4.2.6p5-2.el6_5.1.x86_64.rpm SHA-256: 7756ec3d2db08633fbfd35d7335162badc6488fda01db8f57c9681de70cdcc90
ntp-doc-4.2.6p5-2.el6_5.1.noarch.rpm SHA-256: 72175dd5fe7b119c910b3118857f0ea14a647d33e56de31ced62e2628a38ae4b
ntp-perl-4.2.6p5-2.el6_5.1.x86_64.rpm SHA-256: 862516c11eb838eefb16c8ee749cd54eda4d85a0fdc06eb72080008a70797f29
ntpdate-4.2.6p5-2.el6_5.1.x86_64.rpm SHA-256: 50ccba73b10e84c8a89952c0482abddb0ecf474dd1d61902cd1ac5ccd2a72013

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 6.6

SRPM
ntp-4.2.6p5-3.el6_6.1.src.rpm SHA-256: 63eac32a4871566bb2e1d699d43a3ef342e72a4c0820cd4090ef0dad3ed126d0
s390x
ntp-4.2.6p5-3.el6_6.1.s390x.rpm SHA-256: e5d861e30890be0306ccea9192412c67e0f5c8f72e89b29faf5465eded7bd238
ntp-debuginfo-4.2.6p5-3.el6_6.1.s390x.rpm SHA-256: b567ccaa10e5ecc0711d2340cc91d66f16126c7e0572f0b11edf14f7089c1b4a
ntp-debuginfo-4.2.6p5-3.el6_6.1.s390x.rpm SHA-256: b567ccaa10e5ecc0711d2340cc91d66f16126c7e0572f0b11edf14f7089c1b4a
ntp-doc-4.2.6p5-3.el6_6.1.noarch.rpm SHA-256: b3d00403abff1935a360073dbb7b634aa029a225c760a664de1b5e751a5601a0
ntp-perl-4.2.6p5-3.el6_6.1.s390x.rpm SHA-256: 6a1380c9c8a08c33c3856f3156c265763ea97c93237339c883b91e35bcee7241
ntpdate-4.2.6p5-3.el6_6.1.s390x.rpm SHA-256: ee90c415796a4f761fa977afe0255e1ed0b3d672d72a611c6a5e2392ec7f2e0a

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 6.5

SRPM
ntp-4.2.6p5-2.el6_5.1.src.rpm SHA-256: 804c0ee6d5532214ae0beb958e1983da049673e0e961d21529b97ad70ad74666
s390x
ntp-debuginfo-4.2.6p5-2.el6_5.1.s390x.rpm SHA-256: fda17322a455e2fa040ce4d192fdb9b88fe9eb60980f393f310df05a563a20d4
ntp-doc-4.2.6p5-2.el6_5.1.noarch.rpm SHA-256: 72175dd5fe7b119c910b3118857f0ea14a647d33e56de31ced62e2628a38ae4b
ntp-perl-4.2.6p5-2.el6_5.1.s390x.rpm SHA-256: 7d227f603849b297b1f17b2b082737ed517f5df107f621af9e02ba1000cea312

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.6

SRPM
ntp-4.2.6p5-3.el6_6.1.src.rpm SHA-256: 63eac32a4871566bb2e1d699d43a3ef342e72a4c0820cd4090ef0dad3ed126d0
ppc64
ntp-4.2.6p5-3.el6_6.1.ppc64.rpm SHA-256: fb962d6ea01da0ff0b8d1a3a306d7f1e931da29f1275c10fdadf69d1d18fd1d2
ntp-debuginfo-4.2.6p5-3.el6_6.1.ppc64.rpm SHA-256: 64ba62e859aa0af4182eda5a3915b9eab00e189d6e69707684193404d18e9306
ntp-debuginfo-4.2.6p5-3.el6_6.1.ppc64.rpm SHA-256: 64ba62e859aa0af4182eda5a3915b9eab00e189d6e69707684193404d18e9306
ntp-doc-4.2.6p5-3.el6_6.1.noarch.rpm SHA-256: b3d00403abff1935a360073dbb7b634aa029a225c760a664de1b5e751a5601a0
ntp-perl-4.2.6p5-3.el6_6.1.ppc64.rpm SHA-256: ee9cc2a027a55249ec2bb5b77591d673ae1ccfb24171ef5dac5707006080616a
ntpdate-4.2.6p5-3.el6_6.1.ppc64.rpm SHA-256: ed83ce6434ffbe82ace2064c1ddd26983ea545b349e4dc5a10cf45143ba4a0b3

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.5

SRPM
ntp-4.2.6p5-2.el6_5.1.src.rpm SHA-256: 804c0ee6d5532214ae0beb958e1983da049673e0e961d21529b97ad70ad74666
ppc64
ntp-4.2.6p5-2.el6_5.1.ppc64.rpm SHA-256: fd7cd8dae8e922e7d560f808ed741ede426ca8ca855a14de8753be19ae601c54
ntp-debuginfo-4.2.6p5-2.el6_5.1.ppc64.rpm SHA-256: da347ab2c501678d71b8e2d6a99d4433bc947a717108f6dc96ae190c71897cbb
ntp-debuginfo-4.2.6p5-2.el6_5.1.ppc64.rpm SHA-256: da347ab2c501678d71b8e2d6a99d4433bc947a717108f6dc96ae190c71897cbb
ntp-doc-4.2.6p5-2.el6_5.1.noarch.rpm SHA-256: 72175dd5fe7b119c910b3118857f0ea14a647d33e56de31ced62e2628a38ae4b
ntp-perl-4.2.6p5-2.el6_5.1.ppc64.rpm SHA-256: e069ffc2ff288339ae267740fe504cb2fd65cebeca0f8b1e92b4a22abe71d5b3
ntpdate-4.2.6p5-2.el6_5.1.ppc64.rpm SHA-256: 1f3475ece3d0b8297e20b73882d751f1a091d7c73b36091930a0e62bead4b233

Red Hat Enterprise Linux Server - TUS 6.6

SRPM
ntp-4.2.6p5-3.el6_6.1.src.rpm SHA-256: 63eac32a4871566bb2e1d699d43a3ef342e72a4c0820cd4090ef0dad3ed126d0
x86_64
ntp-4.2.6p5-3.el6_6.1.x86_64.rpm SHA-256: 7a5c29dc4ada95a1e13d39ec3463e79fe163c65ea34351c41a2776da1a7f69ae
ntp-debuginfo-4.2.6p5-3.el6_6.1.x86_64.rpm SHA-256: 511f96d3f026aaa82fba5ce4dd45e1507b76f84454af782127292bb9f635c3d1
ntp-debuginfo-4.2.6p5-3.el6_6.1.x86_64.rpm SHA-256: 511f96d3f026aaa82fba5ce4dd45e1507b76f84454af782127292bb9f635c3d1
ntp-doc-4.2.6p5-3.el6_6.1.noarch.rpm SHA-256: b3d00403abff1935a360073dbb7b634aa029a225c760a664de1b5e751a5601a0
ntp-perl-4.2.6p5-3.el6_6.1.x86_64.rpm SHA-256: 920346bc0a13b338c5a95bbf72a6c968c2dd6d4dd75e9faa747f69a6c4f7f037
ntpdate-4.2.6p5-3.el6_6.1.x86_64.rpm SHA-256: 563ae7e7f52edce7821f463d8e9a5e47f1ee04440badee3dfc35c9c62133a0f9

Red Hat Enterprise Linux Server - TUS 6.5

SRPM
ntp-4.2.6p5-2.el6_5.1.src.rpm SHA-256: 804c0ee6d5532214ae0beb958e1983da049673e0e961d21529b97ad70ad74666
x86_64
ntp-4.2.6p5-2.el6_5.1.x86_64.rpm SHA-256: 8713001197a6c524f54fc1f0e7ce8cf7c64d0716236073adb1c4ee420cb6ad47
ntp-debuginfo-4.2.6p5-2.el6_5.1.x86_64.rpm SHA-256: 7756ec3d2db08633fbfd35d7335162badc6488fda01db8f57c9681de70cdcc90
ntp-debuginfo-4.2.6p5-2.el6_5.1.x86_64.rpm SHA-256: 7756ec3d2db08633fbfd35d7335162badc6488fda01db8f57c9681de70cdcc90
ntp-doc-4.2.6p5-2.el6_5.1.noarch.rpm SHA-256: 72175dd5fe7b119c910b3118857f0ea14a647d33e56de31ced62e2628a38ae4b
ntp-perl-4.2.6p5-2.el6_5.1.x86_64.rpm SHA-256: 862516c11eb838eefb16c8ee749cd54eda4d85a0fdc06eb72080008a70797f29
ntpdate-4.2.6p5-2.el6_5.1.x86_64.rpm SHA-256: 50ccba73b10e84c8a89952c0482abddb0ecf474dd1d61902cd1ac5ccd2a72013

Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.6

SRPM
ntp-4.2.6p5-3.el6_6.1.src.rpm SHA-256: 63eac32a4871566bb2e1d699d43a3ef342e72a4c0820cd4090ef0dad3ed126d0
x86_64
ntp-4.2.6p5-3.el6_6.1.x86_64.rpm SHA-256: 7a5c29dc4ada95a1e13d39ec3463e79fe163c65ea34351c41a2776da1a7f69ae
ntp-debuginfo-4.2.6p5-3.el6_6.1.x86_64.rpm SHA-256: 511f96d3f026aaa82fba5ce4dd45e1507b76f84454af782127292bb9f635c3d1
ntpdate-4.2.6p5-3.el6_6.1.x86_64.rpm SHA-256: 563ae7e7f52edce7821f463d8e9a5e47f1ee04440badee3dfc35c9c62133a0f9
i386
ntp-4.2.6p5-3.el6_6.1.i686.rpm SHA-256: 0d07e9edbcb8024dd3e3e3f5f341af64d064dc768a2170eda0651af4c3fefa49
ntp-debuginfo-4.2.6p5-3.el6_6.1.i686.rpm SHA-256: fc07fbe3ac5f3b1aad1f08e0227ce2ffbea43996d2099313066fdf6cd962a2d4
ntpdate-4.2.6p5-3.el6_6.1.i686.rpm SHA-256: abec6ed4f42a844beb189ef10d57b6e299e0b97af317c7c5fb19e52c60e08d8d

Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.5

SRPM
ntp-4.2.6p5-2.el6_5.1.src.rpm SHA-256: 804c0ee6d5532214ae0beb958e1983da049673e0e961d21529b97ad70ad74666
x86_64
ntp-4.2.6p5-2.el6_5.1.x86_64.rpm SHA-256: 8713001197a6c524f54fc1f0e7ce8cf7c64d0716236073adb1c4ee420cb6ad47
ntp-debuginfo-4.2.6p5-2.el6_5.1.x86_64.rpm SHA-256: 7756ec3d2db08633fbfd35d7335162badc6488fda01db8f57c9681de70cdcc90
ntpdate-4.2.6p5-2.el6_5.1.x86_64.rpm SHA-256: 50ccba73b10e84c8a89952c0482abddb0ecf474dd1d61902cd1ac5ccd2a72013
i386
ntp-4.2.6p5-2.el6_5.1.i686.rpm SHA-256: e47734a1959d80c7d8d12018b7c3caf2e7bdb9299f79c7902171f47686f784a2
ntp-debuginfo-4.2.6p5-2.el6_5.1.i686.rpm SHA-256: beb814ae5230f5d02db9eba2490559c34f26a0dd434e27312a740f6fc3e54dc3
ntpdate-4.2.6p5-2.el6_5.1.i686.rpm SHA-256: 9529354c335493c04f22762146b157fb60e6761c4b383f4249232ed6f8de5229

Red Hat Enterprise Linux EUS Compute Node 6.6

SRPM
ntp-4.2.6p5-3.el6_6.1.src.rpm SHA-256: 63eac32a4871566bb2e1d699d43a3ef342e72a4c0820cd4090ef0dad3ed126d0
x86_64
ntp-4.2.6p5-3.el6_6.1.x86_64.rpm SHA-256: 7a5c29dc4ada95a1e13d39ec3463e79fe163c65ea34351c41a2776da1a7f69ae
ntp-debuginfo-4.2.6p5-3.el6_6.1.x86_64.rpm SHA-256: 511f96d3f026aaa82fba5ce4dd45e1507b76f84454af782127292bb9f635c3d1
ntp-debuginfo-4.2.6p5-3.el6_6.1.x86_64.rpm SHA-256: 511f96d3f026aaa82fba5ce4dd45e1507b76f84454af782127292bb9f635c3d1
ntp-doc-4.2.6p5-3.el6_6.1.noarch.rpm SHA-256: b3d00403abff1935a360073dbb7b634aa029a225c760a664de1b5e751a5601a0
ntp-perl-4.2.6p5-3.el6_6.1.x86_64.rpm SHA-256: 920346bc0a13b338c5a95bbf72a6c968c2dd6d4dd75e9faa747f69a6c4f7f037
ntpdate-4.2.6p5-3.el6_6.1.x86_64.rpm SHA-256: 563ae7e7f52edce7821f463d8e9a5e47f1ee04440badee3dfc35c9c62133a0f9

Red Hat Enterprise Linux EUS Compute Node 6.5

SRPM
ntp-4.2.6p5-2.el6_5.1.src.rpm SHA-256: 804c0ee6d5532214ae0beb958e1983da049673e0e961d21529b97ad70ad74666
x86_64
ntp-4.2.6p5-2.el6_5.1.x86_64.rpm SHA-256: 8713001197a6c524f54fc1f0e7ce8cf7c64d0716236073adb1c4ee420cb6ad47
ntp-debuginfo-4.2.6p5-2.el6_5.1.x86_64.rpm SHA-256: 7756ec3d2db08633fbfd35d7335162badc6488fda01db8f57c9681de70cdcc90
ntp-debuginfo-4.2.6p5-2.el6_5.1.x86_64.rpm SHA-256: 7756ec3d2db08633fbfd35d7335162badc6488fda01db8f57c9681de70cdcc90
ntp-doc-4.2.6p5-2.el6_5.1.noarch.rpm SHA-256: 72175dd5fe7b119c910b3118857f0ea14a647d33e56de31ced62e2628a38ae4b
ntp-perl-4.2.6p5-2.el6_5.1.x86_64.rpm SHA-256: 862516c11eb838eefb16c8ee749cd54eda4d85a0fdc06eb72080008a70797f29
ntpdate-4.2.6p5-2.el6_5.1.x86_64.rpm SHA-256: 50ccba73b10e84c8a89952c0482abddb0ecf474dd1d61902cd1ac5ccd2a72013

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.