ntp (1:4.2.6.p5+dfsg-3ubuntu5) vivid; urgency=medium
* SECURITY UPDATE: symmetric key unauthenticated packet MITM attack
- debian/patches/CVE-2015-1798.patch: reject packets without MAC in
ntpd/ntp_proto.c.
- CVE-2015-1798
* SECURITY UPDATE: symmetric association DoS attack
- debian/patches/CVE-2015-1799.patch: don't update state variables when
authentication fails in ntpd/ntp_proto.c.
- CVE-2015-1799
Date: Tue, 07 Apr 2015 12:48:31 -0400
Changed-By: Marc Deslauriers <[email protected]>
Maintainer: Ubuntu Developers <[email protected]>
https://launchpad.net/ubuntu/+source/ntp/1:4.2.6.p5+dfsg-3ubuntu5
Format: 1.8
Date: Tue, 07 Apr 2015 12:48:31 -0400
Source: ntp
Binary: ntp ntpdate ntp-doc
Architecture: source
Version: 1:4.2.6.p5+dfsg-3ubuntu5
Distribution: vivid
Urgency: medium
Maintainer: Ubuntu Developers <[email protected]>
Changed-By: Marc Deslauriers <[email protected]>
Description:
ntp - Network Time Protocol daemon and utility programs
ntp-doc - Network Time Protocol documentation
ntpdate - client for setting system time from NTP servers
Changes:
ntp (1:4.2.6.p5+dfsg-3ubuntu5) vivid; urgency=medium
.
* SECURITY UPDATE: symmetric key unauthenticated packet MITM attack
- debian/patches/CVE-2015-1798.patch: reject packets without MAC in
ntpd/ntp_proto.c.
- CVE-2015-1798
* SECURITY UPDATE: symmetric association DoS attack
- debian/patches/CVE-2015-1799.patch: don't update state variables when
authentication fails in ntpd/ntp_proto.c.
- CVE-2015-1799
Checksums-Sha1:
bcc79ea3db030d3a4a6cde072264fcb5f50ea7ae 2348 ntp_4.2.6.p5+dfsg-3ubuntu5.dsc
71f74e8140909e2f1a4ba0cedd028389a0b9bac2 87172
ntp_4.2.6.p5+dfsg-3ubuntu5.debian.tar.xz
Checksums-Sha256:
4ababd3cfb053845e30fc5788a7aa76284b4d3d8cdd61dd5b44c5f0da2a19e64 2348
ntp_4.2.6.p5+dfsg-3ubuntu5.dsc
5990927e1ec9f54756c8d1475beb4f3709db5db283890004b3902ec0f1c479c6 87172
ntp_4.2.6.p5+dfsg-3ubuntu5.debian.tar.xz
Files:
3f8798d4af1047714c4f69729c5d7d2f 2348 net optional
ntp_4.2.6.p5+dfsg-3ubuntu5.dsc
cbbc419cd9b2955ef44967c394d20065 87172 net optional
ntp_4.2.6.p5+dfsg-3ubuntu5.debian.tar.xz
Original-Maintainer: Debian NTP Team
<[email protected]>
--
Vivid-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/vivid-changes
