[ubuntu/jaunty] ntp 1:4.2.4p4+dfsg-7ubuntu3 (Accepted)

[Jamie Strandboge]

ntp (1:4.2.4p4+dfsg-7ubuntu3) jaunty; urgency=low

  * SECURITY UPDATE: clients treat malformed signatures as good when verifying
    server DSA and ECDSA certificates.
    - debian/patches/CVE-2009-0021.patch: update ntpd/ntp_crypto.c to properly
      check the return code of EVP_VerifyFinal()
    - CVE-2009-0021

Date: Tue, 06 Jan 2009 01:19:55 -0600
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/jaunty/+source/ntp/1:4.2.4p4+dfsg-7ubuntu3
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Tue, 06 Jan 2009 01:19:55 -0600
Source: ntp
Binary: ntp ntpdate ntp-doc
Architecture: source
Version: 1:4.2.4p4+dfsg-7ubuntu3
Distribution: jaunty
Urgency: low
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description: 
 ntp        - Network Time Protocol daemon and utility programs
 ntp-doc    - Network Time Protocol documentation
 ntpdate    - client for setting system time from NTP servers
Changes: 
 ntp (1:4.2.4p4+dfsg-7ubuntu3) jaunty; urgency=low
 .
   * SECURITY UPDATE: clients treat malformed signatures as good when verifying
     server DSA and ECDSA certificates.
     - debian/patches/CVE-2009-0021.patch: update ntpd/ntp_crypto.c to properly
       check the return code of EVP_VerifyFinal()
     - CVE-2009-0021
Checksums-Sha1: 
 7645e1423777bd16076193047d613662873582e9 1547 ntp_4.2.4p4+dfsg-7ubuntu3.dsc
 c3e2e3514430183d8dc086849acb815b90ace0f1 303447 ntp_4.2.4p4+dfsg-7ubuntu3.diff.gz
Checksums-Sha256: 
 8068b25b0262d9eb76eb31a36933a65ea294ab1adb657615c09270d06e6be450 1547 ntp_4.2.4p4+dfsg-7ubuntu3.dsc
 43245a15b52afc1af0c531b18f69efc24c6750247c8ff52735538f3448d71325 303447 ntp_4.2.4p4+dfsg-7ubuntu3.diff.gz
Files: 
 562d4585de57a8ac05087de048059234 1547 net optional ntp_4.2.4p4+dfsg-7ubuntu3.dsc
 2ec27632a65ca91675a335fbe656517e 303447 net optional ntp_4.2.4p4+dfsg-7ubuntu3.diff.gz
Original-Maintainer: Debian NTP Team <pkg-ntp-maintainers at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkljC3cACgkQW0JvuRdL8BrtDQCdHPBrFTDzknsXp1qZ/A2JQczw
kaUAnizur7A1AzV3iKBpNSHjnpHTe6Jy
=M7LN
-----END PGP SIGNATURE-----