-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 21 Mar 2019 22:01:16 +0100 Source: ntp Architecture: source Version: 1:4.2.8p13-1 Distribution: experimental Urgency: medium Maintainer: Debian NTP Team <ntp@packages.debian.org> Changed-By: Bernhard Schmidt <berni@debian.org> Closes: 764546 772790 924228 Changes: ntp (1:4.2.8p13-1) experimental; urgency=medium . * New upstream version 4.2.8p13 - CVE-2019-8936: Crafted null dereference attack in authenticated mode 6 packet (Closes: #924228) * ntp: exit 0 from init script if daemon does not exist (Closes: #764546) * Drop locking from ntp initscript/systemd-wrapper * Only delete ntpd statistics files in cronjob (Closes: #772790) Checksums-Sha1: 65fd5b4a73ab30a36cbd2908f60447ff30612198 2241 ntp_4.2.8p13-1.dsc cff200a987d64e891fb349a22313ecb0feaea090 6949363 ntp_4.2.8p13.orig.tar.gz e836a0ca1d7e94ccdbb0d5187a09ae3b43e627c2 48360 ntp_4.2.8p13-1.debian.tar.xz b16d573f0aed0be56b5464ae71846e6646027cfe 7822 ntp_4.2.8p13-1_amd64.buildinfo Checksums-Sha256: 7bdd565de20c8fe43947f8c630b54c8c970bccbef7a45b199b01b11ef05e5518 2241 ntp_4.2.8p13-1.dsc 288772cecfcd9a53694ffab108d1825a31ba77f3a8466b0401baeca3bc232a38 6949363 ntp_4.2.8p13.orig.tar.gz 175d614c56b4669cbe45c230d1cd099f3f7086b61e602559494a796f372bde38 48360 ntp_4.2.8p13-1.debian.tar.xz 3bcd15a93c50ab7a690822e0d6fdfcd5162f420892331d77b6c8f402262946cc 7822 ntp_4.2.8p13-1_amd64.buildinfo Files: 7ad550ad95830e959b997813eb8ce267 2241 net optional ntp_4.2.8p13-1.dsc ea040ab9b4ca656b5229b89d6b822f13 6949363 net optional ntp_4.2.8p13.orig.tar.gz ec9615ae8a95605e3fad204f83c9fedc 48360 net optional ntp_4.2.8p13-1.debian.tar.xz efeeba8b84c7bad880141c2c39130ef8 7822 net optional ntp_4.2.8p13-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJFBAEBCgAvFiEE1uAexRal3873GVbTd1B55bhQvJMFAlyT/V8RHGJlcm5pQGRl Ymlhbi5vcmcACgkQd1B55bhQvJP9Zw/+In+eNRtqcXopnGhhAs8nrR3bHOGna0hp vTNTkOf+e5rvtG4Ka+3L+zOn23wibbYS/Wnkuw+3y+2+yM5fXnJ39f0WlI0Ht4EZ XAun3zWB5Sl8J5y0/9k4nsDTFsnZliQevTm2XPWO9rNsOGNWDG4toDgbiZiIIz8r VCnd4MXyIC1iI/M8yoShomJhl0f8pkGpqxbsrtX/XxE2wBB5XjgRqI7QF14rsd/S MQ5JkgD6gItvcNfcNy41aIN4OKuau78OeILyZoDuE65xuQ0KCWelFySN2wdMNF1Y Vlu+pgGt4x//njOsG2aAhGeq75efrYoSuH9EAgZsfq3l4aKmHRRQ31q0/l//3auS NMMkZC9KqR2vIdIP+EModez0k92ifLDLSbSbTiXRTectE+kumlkOx6K9TgqtqI5P ZSQsODhAkXFFYQE5GWBKPG7C+UX/fAzewEIXgVao8cyKI1IiFkavY5qepoec9Fh1 YX2bmW+tvm5MWh6tFntJDTY+mj3Z0gAGHgQ124ifcGk09SNSuDPXPutqBqph0G+s XCxRp4T9gCVmR+Blddnb0BaGulOFlqTL1Ryb9dhLoK5A+p/Nt4A9xHK5ELWwgHRY e2Y4ObGvJrJF7AY4k0xShdJfpb1XoHh6QErKCPGViy96Ye1t2Hx7RiSbtsRJbCH1 mz+ymklXd4s= =IFb+ -----END PGP SIGNATURE-----