~ubuntu-branches/ubuntu/trusty/ntp/trusty-proposed

Viewing all changes in revision 70.

  • Committer: Package Import Robot
  • Author(s): Marc Deslauriers
  • Date: 2015-04-13 09:05:27 UTC
  • Revision ID: package-import@ubuntu.com-20150413090527-65vhmois8kv2ok0v
Tags: 1:4.2.6.p5+dfsg-3ubuntu2.14.04.3
* SECURITY UPDATE: symmetric key unauthenticated packet MITM attack
  - debian/patches/CVE-2015-1798.patch: reject packets without MAC in
    ntpd/ntp_proto.c.
  - CVE-2015-1798
* SECURITY UPDATE: symmetric association DoS attack
  - debian/patches/CVE-2015-1799.patch: don't update state variables when
    authentication fails in ntpd/ntp_proto.c.
  - CVE-2015-1799
* SECURITY UPDATE: ntp-keygen infinite loop or lack of randonmess on big
  endian platforms
  - debian/patches/ntp-keygen-endless-loop.patch: fix logic in
    util/ntp-keygen.c.
  - CVE number pending

expand all expand all

Show diffs side-by-side

added added

removed removed

Lines of Context: