~ubuntu-branches/ubuntu/precise/ntp/precise-security

Viewing all changes in revision 63.

  • Committer: Package Import Robot
  • Author(s): Marc Deslauriers
  • Date: 2015-04-13 09:06:54 UTC
  • Revision ID: package-import@ubuntu.com-20150413090654-oucd2nxdq5j5od7s
Tags: 1:4.2.6.p3+dfsg-1ubuntu3.4
* SECURITY UPDATE: symmetric key unauthenticated packet MITM attack
  - debian/patches/CVE-2015-1798.patch: reject packets without MAC in
    ntpd/ntp_proto.c.
  - CVE-2015-1798
* SECURITY UPDATE: symmetric association DoS attack
  - debian/patches/CVE-2015-1799.patch: don't update state variables when
    authentication fails in ntpd/ntp_proto.c.
  - CVE-2015-1799
* SECURITY UPDATE: ntp-keygen infinite loop or lack of randonmess on big
  endian platforms
  - debian/patches/ntp-keygen-endless-loop.patch: fix logic in
    util/ntp-keygen.c.
  - CVE number pending

expand all expand all

Show diffs side-by-side

added added

removed removed

Lines of Context: