Synopsis:          Important: ntp security update
Advisory ID:       SLSA-2015:1930-1
Issue Date:        2015-10-26
CVE Numbers:       CVE-2015-7704
                   CVE-2015-5300
--

It was discovered that ntpd as a client did not correctly check timestamps
in Kiss-of-Death packets. A remote attacker could use this flaw to send a
crafted Kiss-of-Death packet to an ntpd client that would increase the
client's polling interval value, and effectively disable synchronization
with the server. (CVE-2015-7704)

It was found that ntpd did not correctly implement the threshold
limitation for the '-g' option, which is used to set the time without any
restrictions. A man-in-the-middle attacker able to intercept NTP traffic
between a connecting client and an NTP server could use this flaw to force
that client to make multiple steps larger than the panic threshold,
effectively changing the time to an arbitrary value. (CVE-2015-5300)

After installing the update, the ntpd daemon will restart automatically.
--

SL6
  x86_64
    ntp-4.2.6p5-5.el6_7.2.x86_64.rpm
    ntp-debuginfo-4.2.6p5-5.el6_7.2.x86_64.rpm
    ntpdate-4.2.6p5-5.el6_7.2.x86_64.rpm
    ntp-perl-4.2.6p5-5.el6_7.2.x86_64.rpm
  i386
    ntp-4.2.6p5-5.el6_7.2.i686.rpm
    ntp-debuginfo-4.2.6p5-5.el6_7.2.i686.rpm
    ntpdate-4.2.6p5-5.el6_7.2.i686.rpm
    ntp-perl-4.2.6p5-5.el6_7.2.i686.rpm
  noarch
    ntp-doc-4.2.6p5-5.el6_7.2.noarch.rpm
SL7
  x86_64
    ntp-4.2.6p5-19.el7_1.3.x86_64.rpm
    ntp-debuginfo-4.2.6p5-19.el7_1.3.x86_64.rpm
    ntpdate-4.2.6p5-19.el7_1.3.x86_64.rpm
    sntp-4.2.6p5-19.el7_1.3.x86_64.rpm
  noarch
    ntp-doc-4.2.6p5-19.el7_1.3.noarch.rpm
    ntp-perl-4.2.6p5-19.el7_1.3.noarch.rpm

- Scientific Linux Development Team