{"action":"Upgrade rust-ntpd to 1.6.2-1 or later.","affected":[{"fixed":"1.6.2-1","introduced":"0"}],"component":"rust-ntpd","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["1.6.2-1"],"id":"tcs_01M5NP2TQEW8HNNB99Q7F9RKN4","modified_at":"2026-10-23T17:47:35.990418005Z","published_at":"2025-08-29T21:15:36.280Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2025-58066","https://security-tracker.debian.org/tracker/CVE-2025-58066"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2025-58066#Debian:14/rust-ntpd","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2025-58066"}],"summary":"nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. In versions between 1.2.0 and 1.6.1 inclusive servers which allow non-NTS traffic are affected by a d"}