[Bug 199508] [net/chrony][security] multiple vulnerabilities

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Sat Apr 18 01:09:43 UTC 2015


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=199508

            Bug ID: 199508
           Summary: [net/chrony][security] multiple vulnerabilities
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: freebsd-ports-bugs at FreeBSD.org
          Reporter: venture37 at geeklan.co.uk
                CC: masaki at club.kyutech.ac.jp
             Flags: maintainer-feedback?(masaki at club.kyutech.ac.jp)
                CC: masaki at club.kyutech.ac.jp

Current version in ports is vulnerable to the following issues
Protect authenticated symmetric NTP associations against DoS attacks
(CVE-2015-1853)
Fix access configuration with subnet size indivisible by 4 (CVE-2015-1821)
Fix initialization of reply slots for authenticated commands (CVE-2015-1822)

Update to 1.31.1

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-ports-bugs mailing list