Format: 1.8 Date: Wed, 28 Jun 2017 07:53:21 -0400 Source: ntp Binary: ntp ntpdate ntp-doc Architecture: s390x Version: 1:4.2.8p9+dfsg-2ubuntu1.1 Distribution: zesty Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: ntp - Network Time Protocol daemon and utility programs ntp-doc - Network Time Protocol documentation ntpdate - client for setting system time from NTP servers Changes: ntp (1:4.2.8p9+dfsg-2ubuntu1.1) zesty-security; urgency=medium . * SECURITY UPDATE: DoS in the origin timestamp check - debian/patches/CVE-2016-9042.patch: comment out broken code in ntpd/ntp_proto.c. - CVE-2016-9042 * SECURITY UPDATE: potential Overflows in ctl_put() functions - debian/patches/CVE-2017-6458.patch: check lengths in ntpd/ntp_control.c. - CVE-2017-6458 * SECURITY UPDATE: overflow via long flagstr variable - debian/patches/CVE-2017-6460.patch: check length in ntpq/ntpq-subs.c. - CVE-2017-6460 * SECURITY UPDATE: buffer overflow in DPTS refclock driver - debian/patches/CVE-2017-6462.patch: don't overrun buffer in ntpd/refclock_datum.c. - CVE-2017-6462 * SECURITY UPDATE: DoS via invalid setting in a :config directive - debian/patches/CVE-2017-6463.patch: protect against overflow in ntpd/ntp_config.c. - CVE-2017-6463 * SECURITY UPDATE: Dos via malformed mode configuration directive - debian/patches/CVE-2017-6464.patch: validate directives in ntpd/ntp_config.c, ntpd/ntp_proto.c. - CVE-2017-6464 Checksums-Sha1: f2e2350d33b8a1fa88a128377ebe8dccee22e3f8 1036584 ntp-dbgsym_4.2.8p9+dfsg-2ubuntu1.1_s390x.ddeb 1e2700cd78fcafe3f27bbd2a173941928cc2e862 533832 ntp_4.2.8p9+dfsg-2ubuntu1.1_s390x.deb c0c82f69a3635a0ed0c4d268e5e115d51a71a675 139908 ntpdate-dbgsym_4.2.8p9+dfsg-2ubuntu1.1_s390x.ddeb 19c071b0ad9be642c4b515c5d3a45170ed701bb4 51326 ntpdate_4.2.8p9+dfsg-2ubuntu1.1_s390x.deb Checksums-Sha256: 54c9f8664f232ec5732c3d18566f3413790c7e6380580a4bda761a91883a78eb 1036584 ntp-dbgsym_4.2.8p9+dfsg-2ubuntu1.1_s390x.ddeb 365491b6e94504ba36560769bb076194df1b4d605e93c239996c2df48807fb5e 533832 ntp_4.2.8p9+dfsg-2ubuntu1.1_s390x.deb df83c706c23db5e635d7ab8d27a228af89cfc93b52ad09bee2b5d4c6e800457a 139908 ntpdate-dbgsym_4.2.8p9+dfsg-2ubuntu1.1_s390x.ddeb c196f7aaea11c99eb4e08261cbbb25813a52064a2fbe050fe7098da5c9c19cb2 51326 ntpdate_4.2.8p9+dfsg-2ubuntu1.1_s390x.deb Files: f3cfbb779884c9aa2a88c267ecf9bad2 1036584 net extra ntp-dbgsym_4.2.8p9+dfsg-2ubuntu1.1_s390x.ddeb ba1027f8dae980964b63c90ac9fb8ab8 533832 net optional ntp_4.2.8p9+dfsg-2ubuntu1.1_s390x.deb 7a9ded6d7675477ceea4eb4a7361fc2f 139908 net extra ntpdate-dbgsym_4.2.8p9+dfsg-2ubuntu1.1_s390x.ddeb 240bea4e8678caf0e26707748ad8f702 51326 net optional ntpdate_4.2.8p9+dfsg-2ubuntu1.1_s390x.deb Original-Maintainer: Debian NTP Team