Format: 1.8 Date: Fri, 06 Jul 2018 15:34:25 -0400 Source: ntp Binary: ntp ntpdate ntp-doc Architecture: amd64 all Version: 1:4.2.8p4+dfsg-3ubuntu5.9 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: ntp - Network Time Protocol daemon and utility programs ntp-doc - Network Time Protocol documentation ntpdate - client for setting system time from NTP servers Changes: ntp (1:4.2.8p4+dfsg-3ubuntu5.9) xenial-security; urgency=medium . * SECURITY UPDATE: code execution via buffer overflow in decodearr - debian/patches/CVE-2018-7183.patch: prevent writing beyons limits in ntpq/ntpq.c. - CVE-2018-7183 * SECURITY UPDATE: DoS via certain packets with a zero-origin timestamp - debian/patches/CVE-2018-7185.patch: add additional checks to ntpd/ntp_proto.c. - CVE-2018-7185 Checksums-Sha1: 14f826043fafbf80657ac99cec4f9771f89ae832 966514 ntp-dbgsym_4.2.8p4+dfsg-3ubuntu5.9_amd64.ddeb e5b8ba9d959e3c7a5449b53d9c50099810c6e85d 1168990 ntp-doc_4.2.8p4+dfsg-3ubuntu5.9_all.deb 5a64550156b979036b408426948da612dcd2f900 518548 ntp_4.2.8p4+dfsg-3ubuntu5.9_amd64.deb a9a54e8697edf9b8ad94d996e149bae7c29f32bf 113938 ntpdate-dbgsym_4.2.8p4+dfsg-3ubuntu5.9_amd64.ddeb 793d8214f9d2f642764fb262842b007f62959e8d 48626 ntpdate_4.2.8p4+dfsg-3ubuntu5.9_amd64.deb Checksums-Sha256: b6cd04d292851612aae9e52dc2caf0a94d93fb903376070457259f864c694ab1 966514 ntp-dbgsym_4.2.8p4+dfsg-3ubuntu5.9_amd64.ddeb 5208f5455b741fe86d505658c308fe234063b9f57bd00fb882095832fe31815c 1168990 ntp-doc_4.2.8p4+dfsg-3ubuntu5.9_all.deb ff01dab94b803e075c466904940c464698cf5eefcf0e592decea1ba423868b2f 518548 ntp_4.2.8p4+dfsg-3ubuntu5.9_amd64.deb 8577d490457a89801c545a6c0fbc70f5786f14b777c4a4c3d4e4770c60e1ad50 113938 ntpdate-dbgsym_4.2.8p4+dfsg-3ubuntu5.9_amd64.ddeb 93b1072fa90bb88c6eb2a5230c14389a36b17da6f18607c50c5cc7400a1884e1 48626 ntpdate_4.2.8p4+dfsg-3ubuntu5.9_amd64.deb Files: f577eba2be3bd49c85ce95c530a3b762 966514 net extra ntp-dbgsym_4.2.8p4+dfsg-3ubuntu5.9_amd64.ddeb f05a550636055c4634021c025bd4821c 1168990 doc optional ntp-doc_4.2.8p4+dfsg-3ubuntu5.9_all.deb 6b202da041cc23cc940790ee82741e86 518548 net optional ntp_4.2.8p4+dfsg-3ubuntu5.9_amd64.deb a13dc477625fbf48ea77d2398f1be5ac 113938 net extra ntpdate-dbgsym_4.2.8p4+dfsg-3ubuntu5.9_amd64.ddeb abd0167bf7d801474435c6411a21494e 48626 net optional ntpdate_4.2.8p4+dfsg-3ubuntu5.9_amd64.deb Original-Maintainer: Debian NTP Team