UbuntuUpdates.org

Package "chrony"

Name: chrony

Description:

Versatile implementation of the Network Time Protocol
Latest version: 2.1.1-1ubuntu0.1
Release: xenial (16.04)
Level: security
Repository: universe
Homepage: http://chrony.tuxfamily.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "chrony"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "chrony" in Xenial

Repository Area Version
base universe 2.1.1-1
updates universe 2.1.1-1ubuntu0.1

Changelog

Version: 2.1.1-1ubuntu0.1 2018-12-06 20:07:07 UTC

  chrony (2.1.1-1ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Remote attackers to conduct impersonation attacks via
    an arbitrary trusted key, aka a "skeleton key".
    - debian/patches/CVE-2016-1567.patch: restrict authentication of
      server/peer to specified key.
    - CVE-2016-1567

 -- Eduardo Barretto <email address hidden> Wed, 05 Dec 2018 18:51:33 -0200
CVE-2016-1567 chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote att


About   -   Send Feedback to @ubuntu_updates