Format: 1.8 Date: Fri, 06 Jul 2018 15:08:42 -0400 Source: ntp Binary: ntp ntpdate ntp-doc sntp Architecture: amd64 all Version: 1:4.2.8p10+dfsg-5ubuntu7.1 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: ntp - Network Time Protocol daemon and utility programs ntp-doc - Network Time Protocol documentation ntpdate - client for setting system time from NTP servers sntp - Network Time Protocol - sntp client Changes: ntp (1:4.2.8p10+dfsg-5ubuntu7.1) bionic-security; urgency=medium . * SECURITY UPDATE: DoS via mode 6 packet - debian/patches/CVE-2018-7182.patch: do not compare past NUL byte in ntpd/ntp_control.c. - CVE-2018-7182 * SECURITY UPDATE: code execution via buffer overflow in decodearr - debian/patches/CVE-2018-7183.patch: prevent writing beyons limits in ntpq/ntpq.c. - CVE-2018-7183 * SECURITY UPDATE: DoS via packet with zero-origin timestamp - debian/patches/CVE-2018-7184.patch: recover from bad state in ntpd/ntp_proto.c. - CVE-2018-7184 * SECURITY UPDATE: DoS via certain packets with a zero-origin timestamp - debian/patches/CVE-2018-7185.patch: add additional checks to ntpd/ntp_proto.c. - CVE-2018-7185 Checksums-Sha1: 9ae3d982af0d31d30964979d380fcfb37dcfd0e7 1834916 ntp-dbgsym_4.2.8p10+dfsg-5ubuntu7.1_amd64.ddeb 7a124a1428a65f91b222fd603ad8446a2c7d6cb6 1166488 ntp-doc_4.2.8p10+dfsg-5ubuntu7.1_all.deb 42c051c035335c7abc925546748037f9114429a3 7357 ntp_4.2.8p10+dfsg-5ubuntu7.1_amd64.buildinfo af6731b6efd3509af7024aa9f308bcc812b7f104 640112 ntp_4.2.8p10+dfsg-5ubuntu7.1_amd64.deb c27561503e95515583c06ab243b1ce22cfaff83d 176664 ntpdate-dbgsym_4.2.8p10+dfsg-5ubuntu7.1_amd64.ddeb 782838b65e1c60957e916b1673c389ca247d6bd0 51804 ntpdate_4.2.8p10+dfsg-5ubuntu7.1_amd64.deb 30596e95527c92cdab1df58cc452b412db273bf7 336368 sntp-dbgsym_4.2.8p10+dfsg-5ubuntu7.1_amd64.ddeb 78d1383139a1172bed84b41dbe0a83f39e614103 86888 sntp_4.2.8p10+dfsg-5ubuntu7.1_amd64.deb Checksums-Sha256: c745c81b21a0348ed0bc88c328dfacc276b290e6bdf82ea4eeb111976604525c 1834916 ntp-dbgsym_4.2.8p10+dfsg-5ubuntu7.1_amd64.ddeb 9b8afee7073d099614d8382f26bf4fb9c3a8b415dc05f62fb28d5e39164936b5 1166488 ntp-doc_4.2.8p10+dfsg-5ubuntu7.1_all.deb a688dc7d73a936168bc8297fd065d6a6e08c919c94e32722ba72435d9cd18d59 7357 ntp_4.2.8p10+dfsg-5ubuntu7.1_amd64.buildinfo aa1d62f3b754964043b5de1e8be32503e20a3f1642d8ebc836b6e7f9ed052d40 640112 ntp_4.2.8p10+dfsg-5ubuntu7.1_amd64.deb 985d1eaa14e9845067afbbc82685ad382f08083b7fa4d2a3c9c38c46f2a64135 176664 ntpdate-dbgsym_4.2.8p10+dfsg-5ubuntu7.1_amd64.ddeb fba4abd2ed37db90e96de6e223dff6eb231bb6c545a6624b4be2975917cab53b 51804 ntpdate_4.2.8p10+dfsg-5ubuntu7.1_amd64.deb a0201724b4167ba5f1763d792a007ef8fa59b9b590010cf38dae54d8ab83c743 336368 sntp-dbgsym_4.2.8p10+dfsg-5ubuntu7.1_amd64.ddeb f3d5eb60b1779f112524b790a662a1f663f1e5d68935abb5c9c6f350d66db063 86888 sntp_4.2.8p10+dfsg-5ubuntu7.1_amd64.deb Files: cb4c7d6a94060e4c100c4e5758aa0f20 1834916 debug optional ntp-dbgsym_4.2.8p10+dfsg-5ubuntu7.1_amd64.ddeb 24951d6a09909d844cf6108f09923b5a 1166488 doc optional ntp-doc_4.2.8p10+dfsg-5ubuntu7.1_all.deb 7631a97b6ecbc369dffa74e5dce066fc 7357 net optional ntp_4.2.8p10+dfsg-5ubuntu7.1_amd64.buildinfo 82f272717c782d128613b6adf597741c 640112 net optional ntp_4.2.8p10+dfsg-5ubuntu7.1_amd64.deb 55207ee03325a9c9b9f4dbe3d57d8ab3 176664 debug optional ntpdate-dbgsym_4.2.8p10+dfsg-5ubuntu7.1_amd64.ddeb 695a09c9c085c1e3c4f6c6c63dab4cb7 51804 net optional ntpdate_4.2.8p10+dfsg-5ubuntu7.1_amd64.deb d677dd96fb24dc284d895d86971f36c6 336368 debug optional sntp-dbgsym_4.2.8p10+dfsg-5ubuntu7.1_amd64.ddeb 61f43b880c93a7b1585632b04c0dee29 86888 net optional sntp_4.2.8p10+dfsg-5ubuntu7.1_amd64.deb Original-Maintainer: Debian NTP Team