Format: 1.8 Date: Mon, 06 Jan 2020 09:25:46 -0500 Source: ntp Binary: ntp ntpdate ntp-doc Architecture: ppc64el Version: 1:4.2.8p4+dfsg-3ubuntu5.10 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Mark Morlino Description: ntp - Network Time Protocol daemon and utility programs ntp-doc - Network Time Protocol documentation ntpdate - client for setting system time from NTP servers Changes: ntp (1:4.2.8p4+dfsg-3ubuntu5.10) xenial-security; urgency=medium . * SECURITY UPDATE: crash or possible code execution via a long string as the ipv4 host argument - debian/patches/CVE-2018-12327.patch prevent overflow of host in openhost() in ntpq/ntpq.c and ntpdc/ntpdc.c. - CVE-2018-12327 Checksums-Sha1: cb90970eebdaa79ee641f76dddca35c0e16d1802 1101444 ntp-dbgsym_4.2.8p4+dfsg-3ubuntu5.10_ppc64el.ddeb 13a50886913d1e3345bb4fbbbdfa5a6c68875ff0 528784 ntp_4.2.8p4+dfsg-3ubuntu5.10_ppc64el.deb 493e918df1f7800e264ae92e37f7ed067009a70f 121906 ntpdate-dbgsym_4.2.8p4+dfsg-3ubuntu5.10_ppc64el.ddeb 0bf058e7b5a1e5812c7e013e5d623330851b2b82 48734 ntpdate_4.2.8p4+dfsg-3ubuntu5.10_ppc64el.deb Checksums-Sha256: f7df4cab3c23e8be2e5332a027e7b1c8ee3e1d60252a3d2f75e46d1a2f9c62b1 1101444 ntp-dbgsym_4.2.8p4+dfsg-3ubuntu5.10_ppc64el.ddeb fd6020d453f696b607cefc8bbe5f63aaf3d78385bc9d326286719a2e197f4191 528784 ntp_4.2.8p4+dfsg-3ubuntu5.10_ppc64el.deb 03299bf609f1353dc1fe03f113cd8405003c2dc919c93342915cca220fb9fffb 121906 ntpdate-dbgsym_4.2.8p4+dfsg-3ubuntu5.10_ppc64el.ddeb 6ae299d9da85586afa423583006b2dd8f8912d94bb34d8b77060a54a5684ff52 48734 ntpdate_4.2.8p4+dfsg-3ubuntu5.10_ppc64el.deb Files: bbc71ee4d37f543c3150700b3e9dcc3b 1101444 net extra ntp-dbgsym_4.2.8p4+dfsg-3ubuntu5.10_ppc64el.ddeb 79f3925e4356ff59d7665d52e385dbcc 528784 net optional ntp_4.2.8p4+dfsg-3ubuntu5.10_ppc64el.deb df6d0f7287be6dc9ef8c14c76dc07e23 121906 net extra ntpdate-dbgsym_4.2.8p4+dfsg-3ubuntu5.10_ppc64el.ddeb fbb38f4e434a2684c420435666eba2f7 48734 net optional ntpdate_4.2.8p4+dfsg-3ubuntu5.10_ppc64el.deb Original-Maintainer: Debian NTP Team