-
Committer:
Package Import Robot
-
Author(s):
Marc Deslauriers
-
Date:
2015-04-13 09:06:54 UTC
-
Revision ID:
package-import@ubuntu.com-20150413090654-oucd2nxdq5j5od7s
Tags: 1:4.2.6.p3+dfsg-1ubuntu3.4
* SECURITY UPDATE: symmetric key unauthenticated packet MITM attack
- debian/patches/CVE-2015-1798.patch: reject packets without MAC in
ntpd/ntp_proto.c.
- CVE-2015-1798
* SECURITY UPDATE: symmetric association DoS attack
- debian/patches/CVE-2015-1799.patch: don't update state variables when
authentication fails in ntpd/ntp_proto.c.
- CVE-2015-1799
* SECURITY UPDATE: ntp-keygen infinite loop or lack of randonmess on big
endian platforms
- debian/patches/ntp-keygen-endless-loop.patch: fix logic in
util/ntp-keygen.c.
- CVE number pending