ntp 1:4.2.4p6+dfsg-1ubuntu2 source package in Ubuntu

Changelog

ntp (1:4.2.4p6+dfsg-1ubuntu2) karmic; urgency=low

  * SECURITY UPDATE: stack overflow in ntpd when autokey is enabled
    - debian/patches/CVE-2009-1252.patch: update ntpd/ntp_crypto.c to use
      snprintf() with NTP_MAXSTRLEN when writing to statstr. Also defensively
      adjust ntp_peer.c and ntp_timer.c to do the same.
    - CVE-2009-1252
  * SECURITY UPDATE: stack overflow in ntpq when contacting malicious ntp
    server
    - debian/patches/CVE-2009-0159.patch: increase size of buffer in
      cookedprint() in ntpq/ntpq.c and adjust to use snprintf()
    - CVE-2009-0159

 -- Jamie Strandboge <email address hidden>   Tue, 19 May 2009 15:26:41 -0500

Upload details

Uploaded by:
Jamie Strandboge
Uploaded to:
Karmic
Original maintainer:
Ubuntu Development Team
Architectures:
any
Section:
net
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
ntp_4.2.4p6+dfsg.orig.tar.gz 2.7 MiB a4999efd19b3ff02696ed3dd277aadccafea998b6160f1e6d43ec73185b700fb
ntp_4.2.4p6+dfsg-1ubuntu2.diff.gz 333.8 KiB f3f6e3d9dd2ba7b5bfb7a9fe8a7440ff8963243e5074c8803dcef572e50abec6
ntp_4.2.4p6+dfsg-1ubuntu2.dsc 1.5 KiB 9fcc199da0ba2c0f38024c8f75a24e28964f983c218c338a2cc43296e2e49105

View changes file

Binary packages built by this source

ntp: No summary available for ntp in ubuntu karmic.

No description available for ntp in ubuntu karmic.

ntp-doc: No summary available for ntp-doc in ubuntu karmic.

No description available for ntp-doc in ubuntu karmic.

ntpdate: No summary available for ntpdate in ubuntu karmic.

No description available for ntpdate in ubuntu karmic.