From: Harlan Stenn Date: Sat, 19 Mar 2016 07:57:55 +0000 (-0700) Subject: Merge stenn@psp-deb1.ntp.org:ntp-stable X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3c528f3a7919e9ca851566ff80f34035d7cc690f;p=thirdparty%2Fntp.git Merge stenn@psp-deb1.ntp.org:ntp-stable into max.pfcs.com:/usr/home/harlan/ntp-stable bk: 56ed0683toIvZd1-kpBmh_AHlBOETA --- 3c528f3a7919e9ca851566ff80f34035d7cc690f diff --cc ChangeLog index 6dabb7901,628833383..3fa368dc8 --- a/ChangeLog +++ b/ChangeLog @@@ -1,15 -1,23 +1,31 @@@ --- +* [Sec 2901] KoD packets must have non-zero transmit timestamps. HStenn. +* [Sec 2936] Skeleton Key: Any system knowing the trusted key can serve + time. Include passive servers in this check. HStenn. +* [Sec 2945] Additional KoD packet checks. HStenn. +* [Bug 2858] bool support. Use stdbool.h when available. HStenn. +* [Bug 2879] Improve NTP security against timing attacks. perlinger@ntp.org + - integrated patches by Loganaden Velvidron + with some modifications & unit tests * [Bug 2994] Systems with HAVE_SIGNALED_IO fail to compile. perlinger@ntp.org * [Bug 2995] Fixes to compile on Windows + * [Bug 2999] out-of-bounds access in 'is_safe_filename()'. perlinger@ntp.org + * [Bug 3013] Fix for ssl_init.c SHA1 test. perlinger@ntp.org + - Patch provided by Ch. Weisgerber + * [Bug 3015] ntpq: config-from-file: "request contains an unprintable character" + - A change related to [Bug 2853] forbids trailing white space in + remote config commands. perlinger@ntp.org + * [Bug 3022] authkeys.c should be refactored. perlinger@ntp.org + - fixed memory leak in access list (auth[read]keys.c) + - refactored handling of key access lists (auth[read]keys.c) + - reduced number of error branches (authreadkeys.c) + * [Bug 3023] ntpdate cannot correct dates in the future. perlinger@ntp.org + * [Bug 3030] ntpq needs a general way to specify refid output format. HStenn. + * Document ntp.key's optional IP list in authenetic.html. Harlan Stenn. + * Fix some Credit: attributions in the NEWS file. Harlan Stenn. + * Fix typo in html/monopt.html. Harlan Stenn. + * Add README.pullrequests. Harlan Stenn. --- (4.2.8p6) 2016/01/20 Released by Harlan Stenn