[pkg-ntp-maintainers] Bug#773576: ntp: CVE-2014-9293 CVE-2014-9294 CVE-2014-9295 CVE-2014-9296

[Noah Meyerhans]

On Sun, Dec 21, 2014 at 10:16:37AM -0800, Noah Meyerhans wrote:
> I'm putting an NMU targeting sid/jessie together now. Unless someone
> beats me to it, I should be uploading today.

Not sure why, but I don't have commit access to the ntp svn repo. Going
to upload anyway, and will follow up with svn after. For the record, the
diff is attached. Since the upstream version is unchanged between wheezy
and sid, the patches from stable applied directly to unstable.

 changelog                               |   11 +++++++++
 patches/ntp-4.2.6p5-cve-2014-9293.patch |   37 ++++++++++++++++++++++++++++++
 patches/ntp-4.2.6p5-cve-2014-9294.patch |  111 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 patches/ntp-4.2.6p5-cve-2014-9295.patch |  107 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 patches/ntp-4.2.6p5-cve-2014-9296.patch |   15 ++++++++++++
 patches/series                          |    4 +++
 6 files changed, 285 insertions(+)


-------------- next part --------------
A non-text attachment was scrubbed...
Name: ntp-1:4.2.6.p5+dfsg-5.diff
Type: text/x-diff
Size: 9169 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-ntp-maintainers/attachments/20141221/8563e90a/attachment-0001.diff>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 811 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-ntp-maintainers/attachments/20141221/8563e90a/attachment-0001.sig>