[ubuntu/jaunty-security] chrony (delayed), chrony 1.23-6+lenny1build0.9.04.1 (Accepted)

Ubuntu Installer archive at ubuntu.com
Wed Feb 17 18:06:03 GMT 2010


chrony (1.23-6+lenny1build0.9.04.1) jaunty-security; urgency=low

  * fake sync from Debian

chrony (1.23-6+lenny1) stable-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * This update addresses the following security issues:
    - CVE-2010-0292: chronyd replies to all cmdmon packets from unauthorized
      hosts with.
    - CVE-2010-0293: missing memory limit for to keep client information which
      can lead to memory exhaustion through clients with spoofed IPs
    - CVE-2010-0294: missing syslog limit could lead to filling up the disc
      by triggering various log events in a loop.

Date: Fri, 12 Feb 2010 12:34:07 -0600
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Maintainer: John Hasler <jhasler at debian.org>
https://launchpad.net/ubuntu/jaunty/+source/chrony/1.23-6+lenny1build0.9.04.1
-------------- next part --------------
Format: 1.8
Date: Fri, 12 Feb 2010 12:34:07 -0600
Source: chrony
Binary: chrony
Architecture: source
Version: 1.23-6+lenny1build0.9.04.1
Distribution: jaunty-security
Urgency: high
Maintainer: John Hasler <jhasler at debian.org>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description: 
 chrony     - Sets your computer's clock from time servers on the Net
Changes: 
 chrony (1.23-6+lenny1build0.9.04.1) jaunty-security; urgency=low
 .
   * fake sync from Debian
 .
 chrony (1.23-6+lenny1) stable-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * This update addresses the following security issues:
     - CVE-2010-0292: chronyd replies to all cmdmon packets from unauthorized
       hosts with.
     - CVE-2010-0293: missing memory limit for to keep client information which
       can lead to memory exhaustion through clients with spoofed IPs
     - CVE-2010-0294: missing syslog limit could lead to filling up the disc
       by triggering various log events in a loop.
Checksums-Sha1: 
 c139df600bf9356d2576c710888a18a6a569543b 1066 chrony_1.23-6+lenny1build0.9.04.1.dsc
 4c139146eea6744af48cf11b355c0e17c535428a 163148 chrony_1.23-6+lenny1build0.9.04.1.diff.gz
Checksums-Sha256: 
 84e45685497068a291ad6f930ca7c9e1d815ce6e450f87b892d9ece3cf3e3abd 1066 chrony_1.23-6+lenny1build0.9.04.1.dsc
 8ed1f38125e41db1b52910eba599e14cc6e523aa9ffc251febdd143cf6302209 163148 chrony_1.23-6+lenny1build0.9.04.1.diff.gz
Files: 
 172e34eafb1a24ba746d8a782b60abe8 1066 admin extra chrony_1.23-6+lenny1build0.9.04.1.dsc
 653a30dbd1f0dd4660e12f3daee3324d 163148 admin extra chrony_1.23-6+lenny1build0.9.04.1.diff.gz


More information about the Jaunty-changes mailing list