NEWS update

bk: 55238decVIEZrb81wFe8acZyLHacqg

diff --git a/NEWS b/NEWS
index 9ce70d3772612ca9b274b60e5e1333a4b90a9842..a425a9a4dc3facc726e2c2f7ec1d31abaa6b73f1 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -3,10 +3,10 @@ NTP 4.2.8p2 (Harlan Stenn <stenn@ntp.org>, 2015/04/xx)
 
 Focus: Security and Bug fixes, enhancements.
 
-Severity: HIGH
+Severity: MEDIUM
  
 In addition to bug fixes and enhancements, this release fixes the
-following high-severity vulnerabilities involving private key
+following medium-severity vulnerabilities involving private key
 authentication:
 
 * [Sec 2779] ntpd accepts unauthenticated packets with symmetric key crypto.
@@ -90,6 +90,8 @@ It requires the following commands in order to work:
 
 Some may choose to run this from cron.  It needs more portability testing.
 
+Bug Fixes and Improvements:
+
 * [Bug 1787] DCF77's formerly "antenna" bit is "call bit" since 2003.
 * [Bug 1960] setsockopt IPV6_MULTICAST_IF: Invalid argument.
 * [Bug 2346] "graceful termination" signals do not do peer cleanup.