From: Harlan Stenn <stenn@ntp.org>
Date: Sun, 16 Apr 2023 07:40:22 +0000 (-0500)
Subject: Merge ntp-devbuild.chi1.ntfo.org:/home/nfs1.chi1/stenn/ntp-stable-p16-sec
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=580415c1e0a1daa1a1f949f0291a4b87f4404154;p=thirdparty%2Fntp.git

Merge ntp-devbuild.chi1.ntfo.org:/home/nfs1.chi1/stenn/ntp-stable-p16-sec
into  ntp-devbuild.chi1.ntfo.org:/home/nfs1.chi1/stenn/ntp-stable-3806

bk: 643ba666yJ75EHQtqVtuCsP1x7cQ8w
---

580415c1e0a1daa1a1f949f0291a4b87f4404154
diff --cc ChangeLog
index 0c942b5de,16f264ade..a72d2ae3a
--- a/ChangeLog
+++ b/ChangeLog
@@@ -1,6 -1,6 +1,8 @@@
 +* [Bug 3806] libntp/mstolfp.c needs bounds checking <perlinger@ntp.org>
 +  - solved numerically instead of using string manipulation
  ---
+ * [Sec 3807] praecis_parse() in the Palisade refclock driver has a
+              hypothetical input buffer overflow. Reported by ... stenn@
  * [Bug 3802] ntp-keygen -I default identity modulus bits too small for
               OpenSSL 3.  Reported by rmsh1216@163.com <hart@ntp.org>
  * [Bug 3801] gpsdjson refclock gps_open() device name mishandled. <hart@ntp.org>