From: Harlan Stenn Date: Fri, 20 Jul 2018 09:25:31 +0000 (+0000) Subject: Merge psp-deb1.ntp.org:/home/stenn/ntp-stable-p12-sec X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=0d21a7788080cd3794739f10cfe49b4cec26210b;p=thirdparty%2Fntp.git Merge psp-deb1.ntp.org:/home/stenn/ntp-stable-p12-sec into psp-deb1.ntp.org:/net/nfs1/nfs/home/stenn/ntp-stable-3505 bk: 5b51aa8bl6AuIg4KuD8E0zlnEjTWxw --- 0d21a7788080cd3794739f10cfe49b4cec26210b diff --cc ChangeLog index cbc6942bb,a3d788f70..60c002f3a --- a/ChangeLog +++ b/ChangeLog @@@ -1,7 -1,7 +1,9 @@@ --- +* [Sec 3505] CVE-2018-12327 - Arbitrary Code Execution Vulnerability + - fixed stack buffer overflow in NTPQ/NTPDC + * [Bug 3506] Service Control Manager interacts poorly with NTPD + - changed interaction with SCM to signal pending startup * [Bug 3486] Buffer overflow in ntpq/ntpq.c:tstflags() - applied patch by Gerry Garvey * [Bug 3485] Undefined sockaddr used in error messages in ntp_config.c