From: Harlan Stenn <stenn@ntp.org>
Date: Thu, 21 Feb 2019 01:13:36 +0000 (-0800)
Subject: Update NEWS file
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=48476a33193052bd4840defb93c249dad4305ca5;p=thirdparty%2Fntp.git

Update NEWS file

bk: 5c6dfb40UDNnWAVRoecLo-_SXOCZSw
---

diff --git a/NEWS b/NEWS
index 069b4490d..5cae9372a 100644
--- a/NEWS
+++ b/NEWS
@@ -10,6 +10,9 @@ explicitly trusted source to send a crafted malicious mode 6 (ntpq)
 packet that can trigger a NULL pointer dereference, crashing ntpd.
 It also provides 17 other bugfixes and 1 other improvement:
 
+* [Sec 3565] Crafted null dereference attack in authenticated
+	     mode 6 packet <perlinger@ntp.org>
+  - reported by Magnus Stubman
 * [Bug 3560] Fix build when HAVE_DROPROOT is not defined <perlinger@ntp.org>
   - applied patch by Ian Lepore
 * [Bug 3558] Crash and integer size bug <perlinger@ntp.org>