ntp 1:4.2.4p4+dfsg-7ubuntu5.1 source package in Ubuntu

Changelog

ntp (1:4.2.4p4+dfsg-7ubuntu5.1) jaunty-security; urgency=low

  * SECURITY UPDATE: stack overflow in ntpd when autokey is enabled
    - debian/patches/CVE-2009-1252.patch: update ntpd/ntp_crypto.c to use
      snprintf() with NTP_MAXSTRLEN when writing to statstr. Also defensively
      adjust ntp_peer.c and ntp_timer.c to do the same.
    - CVE-2009-1252
  * SECURITY UPDATE: stack overflow in ntpq when contacting malicious ntp
    server
    - debian/patches/CVE-2009-0159.patch: increase size of buffer in
      cookedprint() in ntpq/ntpq.c and adjust to use snprintf()
    - CVE-2009-0159

 -- Jamie Strandboge <email address hidden>   Wed, 13 May 2009 12:37:23 -0500

Upload details

Uploaded by:
Jamie Strandboge
Uploaded to:
Jaunty
Original maintainer:
Ubuntu Development Team
Architectures:
any
Section:
net
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
ntp_4.2.4p4+dfsg.orig.tar.gz 2.7 MiB 0eb217554dd7f058649f76ca95c669acee3b235daae3a43b08f70b36d636d2bd
ntp_4.2.4p4+dfsg-7ubuntu5.1.diff.gz 298.8 KiB e606362a25f0404894e62ffedbbb0a40aedb8113ee9edae4a598a6e31c19c878
ntp_4.2.4p4+dfsg-7ubuntu5.1.dsc 1.5 KiB 457718d97e0bb8d6f9576584fceca7683ffb42388093f8b8a8ce421be6507dbd

View changes file

Binary packages built by this source

ntp: No summary available for ntp in ubuntu jaunty.

No description available for ntp in ubuntu jaunty.

ntp-doc: No summary available for ntp-doc in ubuntu jaunty.

No description available for ntp-doc in ubuntu jaunty.

ntpdate: No summary available for ntpdate in ubuntu jaunty.

No description available for ntpdate in ubuntu jaunty.