OBSOLETE Patch-ID# 143725-05


Download this patch from My Oracle Support

Your use of the firmware, software and any other materials contained in this update is subject to My Oracle Support Terms of Use, which may be viewed at My Oracle Support.
For further information on patching best practices and resources, please see the following links:
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.

Keywords: security ntpd
Synopsis: Obsoleted by: 143725-06 SunOS 5.10: SunFreeware ntp patch
Date: Jan/20/2015


Install Requirements: Reboot after installing this patch to activate the changes delivered. An alternative may be specified in the Special Install Instructions.

Solaris Release: 10

SunOS Release: 5.10

Unbundled Product:

Unbundled Release:

Xref: This patch available for x86 as patch 143726

Topic: SunOS 5.10: SunFreeware ntp patch

Relevant Architectures: sparc

Bugs fixed with this patch:

Sun CR # Bug #
690253115604540
690833215608765
695132015642291
700164215682716
701303015692202
703128915705382
705540215722546
706441715727250
707426815732829
710603115751447
716118915785388
717646815797761
719131715809878
719132015809881
719549515813516
720203615819505
16090481
16741686
16978017
17000189
17000601
17626608
18280799
18287627
18526836
19239176
19365356
20231654
20244925
20248611
20365212
690202915604171


Changes incorporated in this version: 20365212

Patches accumulated and obsoleted by this patch:

Patches which conflict with this patch:

Patches required with this patch: 144664-01 (or greater)

Obsoleted by:

Files included with this patch:

/etc/inet/ntp4.client
/lib/svc/method/ntp
/usr/lib/help/auths/locale/C/SmfValueNTP.html
/usr/lib/inet/ntp-wait
/usr/lib/inet/ntpd
/usr/sbin/ntp-keygen
/usr/sbin/ntpdate4
/usr/sbin/ntpdc
/usr/sbin/ntpq4
/usr/sbin/ntptime
/usr/sbin/ntptrace4
/usr/share/doc/ntp/access.html
/usr/share/doc/ntp/accopt.html
/usr/share/doc/ntp/assoc.html
/usr/share/doc/ntp/audio.html
/usr/share/doc/ntp/authentic.html
/usr/share/doc/ntp/authopt.html
/usr/share/doc/ntp/autokey.html
/usr/share/doc/ntp/bugs.html
/usr/share/doc/ntp/build.html
/usr/share/doc/ntp/clock.html
/usr/share/doc/ntp/clockopt.html
/usr/share/doc/ntp/cluster.html
/usr/share/doc/ntp/comdex.html
/usr/share/doc/ntp/config.html
/usr/share/doc/ntp/confopt.html
/usr/share/doc/ntp/copyright.html
/usr/share/doc/ntp/debug.html
/usr/share/doc/ntp/decode.html
/usr/share/doc/ntp/description_files/description.jpg (deleted)
/usr/share/doc/ntp/discipline.html
/usr/share/doc/ntp/discover.html
/usr/share/doc/ntp/drivers/driver1.html
/usr/share/doc/ntp/drivers/driver10.html
/usr/share/doc/ntp/drivers/driver11.html
/usr/share/doc/ntp/drivers/driver12.html
/usr/share/doc/ntp/drivers/driver16.html
/usr/share/doc/ntp/drivers/driver18.html
/usr/share/doc/ntp/drivers/driver19.html
/usr/share/doc/ntp/drivers/driver2.html (deleted)
/usr/share/doc/ntp/drivers/driver20.html
/usr/share/doc/ntp/drivers/driver22.html
/usr/share/doc/ntp/drivers/driver27.html
/usr/share/doc/ntp/drivers/driver28.html
/usr/share/doc/ntp/drivers/driver29.html
/usr/share/doc/ntp/drivers/driver3.html
/usr/share/doc/ntp/drivers/driver30.html
/usr/share/doc/ntp/drivers/driver31.html
/usr/share/doc/ntp/drivers/driver32.html
/usr/share/doc/ntp/drivers/driver33.html
/usr/share/doc/ntp/drivers/driver35.html
/usr/share/doc/ntp/drivers/driver36.html
/usr/share/doc/ntp/drivers/driver37.html
/usr/share/doc/ntp/drivers/driver38.html
/usr/share/doc/ntp/drivers/driver39.html
/usr/share/doc/ntp/drivers/driver4.html
/usr/share/doc/ntp/drivers/driver40.html
/usr/share/doc/ntp/drivers/driver42.html
/usr/share/doc/ntp/drivers/driver43.html
/usr/share/doc/ntp/drivers/driver44.html
/usr/share/doc/ntp/drivers/driver45.html
/usr/share/doc/ntp/drivers/driver5.html
/usr/share/doc/ntp/drivers/driver6.html
/usr/share/doc/ntp/drivers/driver7.html
/usr/share/doc/ntp/drivers/driver8.html
/usr/share/doc/ntp/drivers/driver9.html
/usr/share/doc/ntp/drivers/mx4200data.html
/usr/share/doc/ntp/drivers/oncore-shmem.html
/usr/share/doc/ntp/drivers/scripts/footer.txt
/usr/share/doc/ntp/drivers/scripts/style.css
/usr/share/doc/ntp/drivers/tf582_4.html
/usr/share/doc/ntp/extern.html
/usr/share/doc/ntp/filter.html
/usr/share/doc/ntp/gadget.html (deleted)
/usr/share/doc/ntp/hints.html
/usr/share/doc/ntp/hints/sco.html
/usr/share/doc/ntp/hints/vxworks.html
/usr/share/doc/ntp/hints/winnt.html
/usr/share/doc/ntp/history.html
/usr/share/doc/ntp/howto.html
/usr/share/doc/ntp/huffpuff.html
/usr/share/doc/ntp/icons/sitemap.png
/usr/share/doc/ntp/index.html
/usr/share/doc/ntp/kern.html
/usr/share/doc/ntp/kernpps.html
/usr/share/doc/ntp/keygen.html
/usr/share/doc/ntp/leap.html
/usr/share/doc/ntp/manyopt.html (deleted)
/usr/share/doc/ntp/miscopt.html
/usr/share/doc/ntp/monopt.html
/usr/share/doc/ntp/msyslog.html
/usr/share/doc/ntp/ntp-wait.html
/usr/share/doc/ntp/ntp_conf.html
/usr/share/doc/ntp/ntpd.html
/usr/share/doc/ntp/ntpdate.html
/usr/share/doc/ntp/ntpdc.html
/usr/share/doc/ntp/ntpdsim.html
/usr/share/doc/ntp/ntpdsim_new.html
/usr/share/doc/ntp/ntpq.html
/usr/share/doc/ntp/ntptime.html
/usr/share/doc/ntp/ntptrace.html
/usr/share/doc/ntp/orphan.html
/usr/share/doc/ntp/parsedata.html
/usr/share/doc/ntp/parsenew.html
/usr/share/doc/ntp/pic/discipline.gif
/usr/share/doc/ntp/pic/fig_3_1.gif
/usr/share/doc/ntp/pic/flt1.gif
/usr/share/doc/ntp/pic/flt2.gif
/usr/share/doc/ntp/pic/flt3.gif
/usr/share/doc/ntp/pic/flt4.gif
/usr/share/doc/ntp/pic/flt5.gif
/usr/share/doc/ntp/pic/flt6.gif
/usr/share/doc/ntp/pic/flt7.gif
/usr/share/doc/ntp/pic/flt8.gif
/usr/share/doc/ntp/pic/flt9.gif
/usr/share/doc/ntp/pic/group.gif
/usr/share/doc/ntp/pic/sx5.gif
/usr/share/doc/ntp/poll.html
/usr/share/doc/ntp/pps.html
/usr/share/doc/ntp/prefer.html
/usr/share/doc/ntp/quick.html
/usr/share/doc/ntp/rate.html
/usr/share/doc/ntp/rdebug.html
/usr/share/doc/ntp/refclock.html
/usr/share/doc/ntp/release.html
/usr/share/doc/ntp/scripts/accopt.txt
/usr/share/doc/ntp/scripts/audio.txt
/usr/share/doc/ntp/scripts/authopt.txt
/usr/share/doc/ntp/scripts/clockopt.txt
/usr/share/doc/ntp/scripts/command.txt
/usr/share/doc/ntp/scripts/config.txt
/usr/share/doc/ntp/scripts/confopt.txt
/usr/share/doc/ntp/scripts/external.txt
/usr/share/doc/ntp/scripts/footer.txt
/usr/share/doc/ntp/scripts/hand.txt
/usr/share/doc/ntp/scripts/install.txt
/usr/share/doc/ntp/scripts/manual.txt
/usr/share/doc/ntp/scripts/misc.txt
/usr/share/doc/ntp/scripts/miscopt.txt
/usr/share/doc/ntp/scripts/monopt.txt
/usr/share/doc/ntp/scripts/refclock.txt
/usr/share/doc/ntp/scripts/special.txt
/usr/share/doc/ntp/scripts/style.css
/usr/share/doc/ntp/select.html
/usr/share/doc/ntp/sitemap.html
/usr/share/doc/ntp/sntp.html
/usr/share/doc/ntp/stats.html
/usr/share/doc/ntp/tickadj.html
/usr/share/doc/ntp/warp.html
/usr/share/doc/ntp/xleave.html
/usr/share/man/man1m/ntpd.1m
/usr/share/man/man1m/ntpdc.1m
/usr/share/ntp/lib/NTP/Util.pm

Problem Description:

20365212 patches 143725-04 and 143726-04 need rebootafter property
 
(from 143725-04)
 
15608765 ntpd(v4) fails with link local IPv6 addresses
15797761 ntpd(1m) man page contains typos
17626608 typo in SmfValueNTP.html
19365356 buffer overrun in tokenize()
20231654 NTP fails to build, bad arc4random
20244925 problem with NTP
20248611 update NTP to 4.2.8
 
(from 143725-03)
 
18280799 ntpd may not reach NTP servers during boot if it has multiple IP addresses
18287627 ntpd sometimes logs unexpected getifaddrs errors
18526836 ntpd complains about invalid argument for IPv6 interface
19239176 NTP configure script fails to detect if_nametoindex library call
 
(from 143725-02)
 
15604540 ntp start method checks for global zone which should not be a requirement
15642291 NTP Bug320: restrict default ignore not working with IPv6
15682716 ntp.client can not be copied to ntp.conf as is
15692202 /lib/svc/method/ntp contains typos
15705382 update NTP to 4.2.7
15722546 ipmp causes reachability issues for NTP 4 daemon
15727250 ntpd errors on some new systems
15732829 ntpdc(1M): "On hostnames no only IP-addresses"
15751447 restrict noserve doesn't work right
15785388 ntpd starts in forked status with error "ntpd indicates no data available!" until restart
15809878 NTP source code contains too much stuff
15809881 tarball for NTP on Solaris 10 should not include GPL licensed files
15813516 ntpd crashed with SIGFPE (Arithmetic Exception)
15819505 ntpdate lies on its resume
16090481 NTP version 4 daemon crashes in isc_interfaceiter_first()
16741686 "ntpd" v4.2.5 cannot accept/query interface names longer than 15 characters
16978017 ntpd debug does not write any output
17000189 NTP needs to increase its file descriptor limit
17000601 ntpd should log a message when it exits abnormally
 
(from 143725-01)
 
6902029 DoS vulnerability in ntpd NTP mode 7 (MODE_PRIVATE) handling [CVE-2009-3563]


Patch Installation Instructions:
--------------------------------
 
Please refer to the man pages for instructions on using 'patchadd'
and 'patchrm' commands provided with Solaris.
 
The following example installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/123456-07
 
The following example removes a patch from a standalone system:
 
       example# patchrm 123456-07
 
For additional examples please see the appropriate man pages. Any
other special or non-generic installation instructions should be
described below as special instructions.


Special Install Instructions:
-----------------------------
 
NOTE 1:  A reboot can be avoided when installing this patch.  Instead it is
         sufficient to restart the SMF service pkg:/network/ntp4:default
         which can be achieved using the following commands:
 
         # svcadm disable ntp4
         # svcadm enable ntp4


README -- Last modified date: Wednesday, July 8, 2015