From: Harlan Stenn Date: Mon, 5 Oct 2015 11:03:39 +0000 (+0000) Subject: 2902 is a security bug X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=910853f32449654a0157072c68115bf172c2765e;p=thirdparty%2Fntp.git 2902 is a security bug bk: 5612590bsxxL86zdxwgjvTGftv-lpQ --- diff --git a/ChangeLog b/ChangeLog index 4bf945f8d..bc636294b 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,4 +1,6 @@ --- +* [Sec 2902] configuration directives "pidfile" and "driftfile" + should be local-only. perlinger@ntp.org (patch by Miroslav Lichvar) * [Bug 2332] (reopened) Exercise thread cancellation once before dropping privileges and limiting resources in NTPD removes the need to link forcefully against 'libgcc_s' which does not always work. J.Perlinger @@ -22,8 +24,6 @@ * [Bug 2888] streamline calendar functions. perlinger@ntp.org * [Bug 2889] ntp-dev-4.3.67 does not build on Windows. perlinger@ntp.org * [Bug 2890] Ignore ENOBUFS on routing netlink socket. Konstantin Khlebnikov. -* [Bug 2902] configuration directives "pidfile" and "driftfile" - should be local-only. perlinger@ntp.org (patch by Miroslav Lichvar) * [Bug 2906] make check needs better support for pthreads. Harlan Stenn. * [Bug 2907] dist* build targets require our libevent/ to be enabled. HStenn. * [Bug 2912] no munlockall() under Windows. David Taylor, Harlan Stenn.