A new updated ntp package within CloudLinux OS 6 ELS has been scheduled for gradual rollout from our production repository.

Rollout slot: 3
Rolled out to: 0.1%
ETA for 100% rollout: October 7

Changelog

ntp-4.2.6p5-16.el6.cloudlinux.els

• Fix incorrect handling of packets from unauthenticated synchronization source with spoofed IP address (CVE-2020-11868)
• Disable monitor to default ntp.conf (CVE-2013-5211)

Update command

yum update ntp*

Immediate update (via bypass)

yum update ntp* --enablerepo=cloudlinux-rollout-3-bypass