mlichvar pushed to ntp (f21). "4.2.6p5-29"
notifications at fedoraproject.org
notifications at fedoraproject.org
Wed Apr 8 11:47:20 UTC 2015
>From 5b879c2bd29d07c0c7e4eabb2e3f015d751b55b4 Mon Sep 17 00:00:00 2001
From: Miroslav Lichvar <mlichvar at redhat.com>
Date: Wed, 8 Apr 2015 13:30:09 +0200
Subject: 4.2.6p5-29
diff --git a/ntp.spec b/ntp.spec
index 5324f06..01ec386 100644
--- a/ntp.spec
+++ b/ntp.spec
@@ -3,7 +3,7 @@
Summary: The NTP daemon and utilities
Name: ntp
Version: 4.2.6p5
-Release: 28%{?dist}
+Release: 29%{?dist}
# primary license (COPYRIGHT) : MIT
# ElectricFence/ (not used) : GPLv2
# kernel/sys/ppsclock.h (not used) : BSD with advertising
@@ -461,6 +461,11 @@ popd
%{ntpdocdir}/html
%changelog
+* Wed Apr 08 2015 Miroslav Lichvar <mlichvar at redhat.com> 4.2.6p5-29
+- reject packets without MAC when authentication is enabled (CVE-2015-1798)
+- protect symmetric associations with symmetric key against DoS attack
+ (CVE-2015-1799)
+
* Thu Feb 26 2015 Miroslav Lichvar <mlichvar at redhat.com> 4.2.6p5-28
- don't step clock for leap second with -x option (#1196635)
- allow creating all SHM segments with owner-only access
--
cgit v0.10.2
http://pkgs.fedoraproject.org/cgit/ntp.git/commit/?h=f21&id=5b879c2bd29d07c0c7e4eabb2e3f015d751b55b4
More information about the scm-commits
mailing list