From: Harlan Stenn Date: Wed, 21 Oct 2015 15:35:31 +0000 (+0000) Subject: Update severity information X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=dbbb6da42e1e04954c8cbb5c80321f43f533e56a;p=thirdparty%2Fntp.git Update severity information bk: 5627b0c3QSxJvNRQ6wW5Qz-V9gU9Sg --- diff --git a/NEWS b/NEWS index 8970646d8..e16d93700 100644 --- a/NEWS +++ b/NEWS @@ -3,10 +3,10 @@ NTP 4.2.8p4 Focus: Security, Bug fies, enhancements. -Severity: HIGH +Severity: MEDIUM In addition to bug fixes and enhancements, this release fixes the -following 13 low-, medium-, and high-severity vulnerabilities: +following 13 low- and medium-severity vulnerabilities: * Incomplete vallen (value length) checks in ntp_crypto.c, leading to potential crashes or potential code injection/information leakage.