[ntp/f20] 4.2.6p5-19

[Miroslav Lichvar]

commit 158ed74e981471211212e15e5ed7078fd32de6fa
Author: Miroslav Lichvar <mlichvar at redhat.com>
Date:   Fri Dec 19 19:44:10 2014 +0100

    4.2.6p5-19

 ntp.spec |    8 +++++++-
 1 files changed, 7 insertions(+), 1 deletions(-)
---
diff --git a/ntp.spec b/ntp.spec
index fcdbbd1..57ad0da 100644
--- a/ntp.spec
+++ b/ntp.spec
@@ -3,7 +3,7 @@
 Summary: The NTP daemon and utilities
 Name: ntp
 Version: 4.2.6p5
-Release: 18%{?dist}
+Release: 19%{?dist}
 # primary license (COPYRIGHT) : MIT
 # ElectricFence/ (not used) : GPLv2
 # kernel/sys/ppsclock.h (not used) : BSD with advertising
@@ -416,6 +416,12 @@ popd
 %{ntpdocdir}/html
 
 %changelog
+* Fri Dec 19 2014 Miroslav Lichvar <mlichvar at redhat.com> 4.2.6p5-19
+- don't generate weak control key for resolver (CVE-2014-9293)
+- don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294)
+- fix buffer overflows via specially-crafted packets (CVE-2014-9295)
+- don't mobilize passive association when authentication fails (CVE-2014-9296)
+
 * Mon Dec 09 2013 Miroslav Lichvar <mlichvar at redhat.com> 4.2.6p5-18
 - fix calculation of root dispersion (#1037981)
 - refresh peers on routing updates (#1028176)