2909 is a security bug

bk: 56125afas1mF36Zz2WwsdikGw_dwpg

diff --git a/ChangeLog b/ChangeLog
index 9ca95350eac0b03c7c2e3d3523924006e0d860ba..f668e1295d690ff2b210c847aafa494e9ae40bd4 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,4 +1,5 @@
 ---
+* [Sec 2909] added missing call to 'free()' in ntp_crypto.c. perlinger@ntp.org
 * [Bug 2595] ntpdate man page quirks.  Hal Murray, Harlan Stenn.
 * [Bug 2625] Deprecate flag1 in local refclock.  Hal Murray, Harlan Stenn.
 * [Bug 2817] Stop locking ntpd into memory by default under Linux.  H.Stenn.
@@ -20,7 +21,6 @@
 * [Bug 2890] Ignore ENOBUFS on routing netlink socket.  Konstantin Khlebnikov.
 * [Bug 2906] make check needs better support for pthreads.  Harlan Stenn.
 * [Bug 2907] dist* build targets require our libevent/ to be enabled.  HStenn.
-* [Bug 2909] added missing call to 'free()' in ntp_crypto.c. perlinger@ntp.org
 * libntp/emalloc.c: Remove explicit include of stdint.h.  Harlan Stenn.
 * Put Unity CPPFLAGS items in unity_config.h.  Harlan Stenn.
 * tests/ntpd/g_leapsec.cpp typo fix.  Harlan Stenn.