ntp 1:4.2.0a+stable-8.1ubuntu6.2 source package in Ubuntu

Changelog

ntp (1:4.2.0a+stable-8.1ubuntu6.2) dapper-security; urgency=low

  * SECURITY UPDATE: stack overflow in ntpd when autokey is enabled
    - update ntpd/ntp_crypto.c to use snprintf() with NTP_MAXSTRLEN when
      writing to statstr. Also defensively adjust ntp_peer.c and ntp_timer.c
      to do the same.
    - CVE-2009-1252
  * SECURITY UPDATE: stack overflow in ntpq when contacting malicious ntp
    server
    - increase size of buffer in cookedprint() in ntpq/ntpq.c and adjust to
      use snprintf()
    - CVE-2009-0159

 -- Jamie Strandboge <email address hidden>   Wed, 13 May 2009 12:49:27 -0500