Hi,

The following vulnerabilities were published for ntpsec.

CVE-2026-102483[0]:
| Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote
| attacker to terminate the daemon via an NTS request with excess NTS
| Cookie Placeholder extension fields.


CVE-2026-102484[1]:
| Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd
| before 1.2.6 allows an attacker who controls the Telephone JJY time
| source to corrupt memory or crash ntpd via more than six time
| replies.


CVE-2026-102485[2]:
| Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec
| ntpd before 1.2.6 allows an attacker who controls the GPS receiver's
| serial data to crash ntpd or disclose memory via a PPS Control
| (@@Gc) reply with an out-of-range mode byte.


CVE-2026-102486[3]:
| Out-of-bounds read in NTS extension field parsing in NTPsec ntpd
| 1.1.4 through 1.2.5 allows a remote attacker to crash the daemon via
| an NTS Authenticator and Encrypted Extension Fields (AEEF) field
| with an oversized nonce length.


If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-102483
https://www.cve.org/CVERecord?id=CVE-2026-102483
[1] https://security-tracker.debian.org/tracker/CVE-2026-102484
https://www.cve.org/CVERecord?id=CVE-2026-102484
[2] https://security-tracker.debian.org/tracker/CVE-2026-102485
https://www.cve.org/CVERecord?id=CVE-2026-102485
[3] https://security-tracker.debian.org/tracker/CVE-2026-102486
https://www.cve.org/CVERecord?id=CVE-2026-102486

Regards,
Salvatore