[Oraclevm-errata] OVMSA-2015-0140 Important: Oracle VM 3.3 ntp security update

Errata Announcements for Oracle VM oraclevm-errata at oss.oracle.com
Mon Oct 26 18:29:00 PDT 2015


Oracle VM Security Advisory OVMSA-2015-0140

The following updated rpms for Oracle VM 3.3 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
ntp-4.2.6p5-5.el6_7.2.x86_64.rpm
ntpdate-4.2.6p5-5.el6_7.2.x86_64.rpm


SRPMS:
http://oss.oracle.com/oraclevm/server/3.3/SRPMS-updates/ntp-4.2.6p5-5.el6_7.2.src.rpm



Description of changes:

[4.2.6p5-5.el6_7.2]
- check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
- allow only one step larger than panic threshold with -g (CVE-2015-5300)





More information about the Oraclevm-errata mailing list