From: Harlan Stenn Date: Sat, 1 Oct 2016 09:07:37 +0000 (+0000) Subject: Merge psp-deb1.ntp.org:/home/stenn/ntp-stable-p9 X-Git-Tag: NTP_4_2_8P9~30 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e3813c72c85b9ee8ccd3cd8b4031722fb126e1a8;p=thirdparty%2Fntp.git Merge psp-deb1.ntp.org:/home/stenn/ntp-stable-p9 into psp-deb1.ntp.org:/home/stenn/ntp-stable-3082 bk: 57ef7cd9z4GaR-_v4y9bmRgkbNR8CA --- e3813c72c85b9ee8ccd3cd8b4031722fb126e1a8 diff --cc ChangeLog index 413cd9217,6b57e2c6f..86af9d4f0 --- a/ChangeLog +++ b/ChangeLog @@@ -1,9 -1,42 +1,44 @@@ --- - * [Sec 3075] Malicious crafted read_mru_list() packet will crash ntpd. - - added missing paramter validation in read_mru_list(). perlinger@ntp.org - * [Sec 3082] (title too long -- Variation of [Sec 3075].) - - more hardening to read_mru_list(). perlinger@ntp.org + (4.2.8p9) 2016/MM/DD Released by Harlan Stenn ++* [Sec 3082] null pointer dereference in _IO_str_init_static_internal() ++ - more hardening to read_mru_list(). perlinger@ntp.org + * [Sec 3072] Attack on interface selection + - implemented Miroslav Lichvars suggestion + to skip interface updates based on incoming packets + * [Bug 3116] unit tests for NTP time stamp expansion. + * [Bug 3100] ntpq can't retrieve daemon_version + - fixed extended sysvar lookup (bug introduced with bug 3008 fix) + * [Bug 3095] Compatibility with openssl 1.1 + - applied patches by Kurt Roeckx to source + - added shim layer for SSL API calls with issues (both directions) + * [Bug 3084] update-leap mis-parses the leapfile name. HStenn. + * [Bug 3068] Linker warnings when building on Solaris. perlinger@ntp.org + - applied patch thanks to Andrew Stormont + * [Bug 3066] NMEA clock ignores pps. perlinger@ntp.org + - PPS-HACK works again. + * [Bug 3059] Potential buffer overrun from oversized hash + - applied patch by Brian Utterback + * [Bug 3053] ntp_loopfilter.c frequency calc precedence error. Sarah White. + * [Bug 3050] Fix for bug #2960 causes [...] spurious error message. + + - patches by Reinhard Max and Havard Eidnes + * [Bug 3047] Fix refclock_jjy C-DEX JST2000. abe@ntp.org + - Patch provided by Kuramatsu. + * [Bug 3021] unity_fixture.c needs pragma weak + - removed unnecessary & harmful decls of 'setUp()' & 'tearDown()' + * [Bug 2998] sntp/tests/packetProcessing.c broken without openssl. JPerlinger + * [Bug 2961] sntp/tests/packetProcessing.c assumes AUTOKEY. HStenn. + * [Bug 2959] refclock_jupiter: gps week correction + - fixed GPS week expansion to work based on build date. Special thanks + to Craig Leres for initial patch and testing. + * [Bug 2951] ntpd tests fail: multiple definition of `send_via_ntp_signd' + - fixed Makefile.am + * [Bug 2689] ATOM driver processes last PPS pulse at startup, + even if it is very old + - make sure PPS source is alive before processing samples + - improve stability close to the 500ms phase jump (phase gate) + * Shim X509_get_signature_nid() if needed. * git author attribution cleanup * bk ignore file cleanup