Format: 1.8 Date: Mon, 13 Apr 2015 09:05:27 -0400 Source: ntp Binary: ntp ntpdate ntp-doc Architecture: arm64 Version: 1:4.2.6.p5+dfsg-3ubuntu2.14.04.3 Distribution: trusty Urgency: medium Maintainer: Ubuntu Build Daemon Changed-By: Marc Deslauriers Description: ntp - Network Time Protocol daemon and utility programs ntp-doc - Network Time Protocol documentation ntpdate - client for setting system time from NTP servers Changes: ntp (1:4.2.6.p5+dfsg-3ubuntu2.14.04.3) trusty-security; urgency=medium . * SECURITY UPDATE: symmetric key unauthenticated packet MITM attack - debian/patches/CVE-2015-1798.patch: reject packets without MAC in ntpd/ntp_proto.c. - CVE-2015-1798 * SECURITY UPDATE: symmetric association DoS attack - debian/patches/CVE-2015-1799.patch: don't update state variables when authentication fails in ntpd/ntp_proto.c. - CVE-2015-1799 * SECURITY UPDATE: ntp-keygen infinite loop or lack of randonmess on big endian platforms - debian/patches/ntp-keygen-endless-loop.patch: fix logic in util/ntp-keygen.c. - CVE number pending Checksums-Sha1: c3702602ca0de2cccaf89c9d78117ee527afe982 353668 ntp_4.2.6.p5+dfsg-3ubuntu2.14.04.3_arm64.deb ceb7eacab42d2ef7a286c31f0054c9e05832e0e3 49554 ntpdate_4.2.6.p5+dfsg-3ubuntu2.14.04.3_arm64.deb Checksums-Sha256: 07336c2e2bde101eaae77c7adcaad6779117336f8ec45554179b4fa070f50a7e 353668 ntp_4.2.6.p5+dfsg-3ubuntu2.14.04.3_arm64.deb 6822e63016ab23173cadad085b28acad3497fad5c5eedf9c0b8b4141ab8cc559 49554 ntpdate_4.2.6.p5+dfsg-3ubuntu2.14.04.3_arm64.deb Files: bf04185bbd8a4cce9c0aac7b8d22365c 353668 net optional ntp_4.2.6.p5+dfsg-3ubuntu2.14.04.3_arm64.deb adfb3562c843944c23a04e56ad7a7925 49554 net optional ntpdate_4.2.6.p5+dfsg-3ubuntu2.14.04.3_arm64.deb Original-Maintainer: Debian NTP Team