[bluewhite64-security] ntp (BW64SA:20090116-03)
Hash: SHA1
[bluewhite64-security] ntp (BW64SA:20090116-03)
New ntp packages are available for Bluewhite64 11.0, 12.0, 12.1, 12.2,
and -current to a fix security issue.
More details about this issue may be found here:
https://lists.ntp.org/pipermail/announce/2009-January/000055.html
http://www.ocert.org/advisories/ocert-2008-016.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0021
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5077
Here are the details from the Bluewhite64 12.2 ChangeLog:
+--------------------------+
PATCHES/packages/ntp-4.2.4p6-x86_64-1.tgz:
[Sec 1111] Fix incorrect check of EVP_VerifyFinal()'s return value.
For more information, see:
https://lists.ntp.org/pipermail/announce/2009-January/000055.html
http://www.ocert.org/advisories/ocert-2008-016.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0021
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5077
[*** Security fix ***]
+--------------------------+
Where to find the new packages:
+-----------------------------+
See the "Get Bluewhite64" section on http://www.bluewhite64.com for additional
mirror sites near you.
Updated package for Bluewhite64 11.0:
http://data.bluewhite64.com/bluewhite64-11.1/patches/packages/ntp-4.2.4p6-x86_64-1.tgz
Updated package for Bluewhite64 12.0:
http://data.bluewhite64.com/bluewhite64-12.0/patches/packages/ntp-4.2.4p6-x86_64-1.tgz
Updated package for Bluewhite64 12.1:
http://data.bluewhite64.com/bluewhite64-12.1/patches/packages/ntp-4.2.4p6-x86_64-1.tgz
Updated package for Bluewhite64 12.2:
http://data.bluewhite64.com/bluewhite64-12.2/patches/packages/ntp-4.2.4p6-x86_64-1.tgz
Updated package for Bluewhite64 -current:
http://data.bluewhite64.com/bluewhite64-current/bluewhite64/n/ntp-4.2.4p6-x86_64-1.tgz
MD5 signatures:
+-------------+
Bluewhite64 11.0 package:
85ec75a664a5a5b108211f764fe7a7e8 ntp-4.2.4p6-x86_64-1.tgz
Bluewhite64 12.0 package:
5c3842022368285a5b1b9f8d76e2916e ntp-4.2.4p6-x86_64-1.tgz
Bluewhite64 12.1 package:
909e7742a3de3bfc975785bd4707d130 ntp-4.2.4p6-x86_64-1.tgz
Bluewhite64 12.2 package:
d66252c2a7f99a93aee05bac8ba9dca8 ntp-4.2.4p6-x86_64-1.tgz
Bluewhite64 -current package:
d66252c2a7f99a93aee05bac8ba9dca8 ntp-4.2.4p6-x86_64-1.tgz
Installation instructions:
+------------------------+
Upgrade the package as root:
# upgradepkg ntp-4.2.4p6-x86_64-1.tgz
+-----+
Bluewhite64 Linux Security Team
http://bluewhite64.com/gpg-key
security©bluewhite64.com
+-------------------------------------------------------+
| To leave the bluewhite64-security mailing list:
+-------------------------------------------------------+
| Send a blank email to
|
| bluewhite64-security-unsubscribe©bluewhite64.com
|
| You will get a confirmation message back containing
| instructions to complete the process.
|
| Please do not reply to this email address.
+-------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAklw7lsACgkQpTOsxuDdlY6XQgCfYxDdy2k2ED3A3caTdOfpOpKd
WlUAniLpUotbaqi7NkUvBaZMCyPUjfEB
=ZAEY
-----END PGP SIGNATURE-----