Debian Rust-Ntpd vulnerabilities

CVE-2025-58066 [MEDIUM] CVE-2025-58066: rust-ntpd - nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP ... nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. In versions between 1.2.0 and 1.6.1 inclusive servers which allow non-NTS traffic are affected by a denial of service vulnerability, where an attacker can induce a message storm between two NTP servers running ntpd-rs. Client-only configurations are not affected. A

CVE-2024-38528 [HIGH] CVE-2024-38528: rust-ntpd - nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP ... nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. There is a missing limit for accepted NTS-KE connections. This allows an unauthenticated remote attacker to crash ntpd-rs when an NTS-KE server is configured. Non NTS-KE server configurations, such as the default ntpd-rs configuration, are unaffected. This vulnerabil