[Secure-testing-team] Bug#737644: chrony: CVE-2014-0021: traffic amplification in cmdmon protocol

[Salvatore Bonaccorso]

Package: chrony
Severity: important
Tags: security upstream fixed-upstream

Hi,

the following vulnerability was published for chrony.

This is fixed upstream in 1.19.1 by modify chronyc protocol. New
version will support both (old and new).

CVE-2014-0021[0]:
traffic amplification in cmdmon protocol

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0021
    http://security-tracker.debian.org/tracker/CVE-2014-0021
[1] http://chrony.tuxfamily.org/News.html

Regards,
Salvatore