[ubuntu/xenial-updates] ntp 1:4.2.8p4+dfsg-3ubuntu5.10 (Accepted)
Ubuntu Archive Robot
cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk
Tue Jan 7 18:28:13 UTC 2020
ntp (1:4.2.8p4+dfsg-3ubuntu5.10) xenial-security; urgency=medium
* SECURITY UPDATE: crash or possible code execution via a long string as
the ipv4 host argument
- debian/patches/CVE-2018-12327.patch prevent overflow of host
in openhost() in ntpq/ntpq.c and ntpdc/ntpdc.c.
- CVE-2018-12327
Date: 2020-01-07 14:50:14.728119+00:00
Changed-By: Mark Morlino <mark.morlino at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/+source/ntp/1:4.2.8p4+dfsg-3ubuntu5.10
-------------- next part --------------
Sorry, changesfile not available.
More information about the Xenial-changes
mailing list