[ubuntu/vivid-proposed] ntp 1:4.2.6.p5+dfsg-3ubuntu5 (Accepted)

[Marc Deslauriers]

ntp (1:4.2.6.p5+dfsg-3ubuntu5) vivid; urgency=medium

  * SECURITY UPDATE: symmetric key unauthenticated packet MITM attack
    - debian/patches/CVE-2015-1798.patch: reject packets without MAC in
      ntpd/ntp_proto.c.
    - CVE-2015-1798
  * SECURITY UPDATE: symmetric association DoS attack
    - debian/patches/CVE-2015-1799.patch: don't update state variables when
      authentication fails in ntpd/ntp_proto.c.
    - CVE-2015-1799

Date: Tue, 07 Apr 2015 12:48:31 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/ntp/1:4.2.6.p5+dfsg-3ubuntu5
-------------- next part --------------
Format: 1.8
Date: Tue, 07 Apr 2015 12:48:31 -0400
Source: ntp
Binary: ntp ntpdate ntp-doc
Architecture: source
Version: 1:4.2.6.p5+dfsg-3ubuntu5
Distribution: vivid
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
 ntp        - Network Time Protocol daemon and utility programs
 ntp-doc    - Network Time Protocol documentation
 ntpdate    - client for setting system time from NTP servers
Changes:
 ntp (1:4.2.6.p5+dfsg-3ubuntu5) vivid; urgency=medium
 .
   * SECURITY UPDATE: symmetric key unauthenticated packet MITM attack
     - debian/patches/CVE-2015-1798.patch: reject packets without MAC in
       ntpd/ntp_proto.c.
     - CVE-2015-1798
   * SECURITY UPDATE: symmetric association DoS attack
     - debian/patches/CVE-2015-1799.patch: don't update state variables when
       authentication fails in ntpd/ntp_proto.c.
     - CVE-2015-1799
Checksums-Sha1:
 bcc79ea3db030d3a4a6cde072264fcb5f50ea7ae 2348 ntp_4.2.6.p5+dfsg-3ubuntu5.dsc
 71f74e8140909e2f1a4ba0cedd028389a0b9bac2 87172 ntp_4.2.6.p5+dfsg-3ubuntu5.debian.tar.xz
Checksums-Sha256:
 4ababd3cfb053845e30fc5788a7aa76284b4d3d8cdd61dd5b44c5f0da2a19e64 2348 ntp_4.2.6.p5+dfsg-3ubuntu5.dsc
 5990927e1ec9f54756c8d1475beb4f3709db5db283890004b3902ec0f1c479c6 87172 ntp_4.2.6.p5+dfsg-3ubuntu5.debian.tar.xz
Files:
 3f8798d4af1047714c4f69729c5d7d2f 2348 net optional ntp_4.2.6.p5+dfsg-3ubuntu5.dsc
 cbbc419cd9b2955ef44967c394d20065 87172 net optional ntp_4.2.6.p5+dfsg-3ubuntu5.debian.tar.xz
Original-Maintainer: Debian NTP Team <pkg-ntp-maintainers at lists.alioth.debian.org>