Module Name: src
Committed By: snj
Date: Tue May 26 04:22:23 UTC 2009
Modified Files:
src/doc [netbsd-5]: CHANGES-5.1
Log Message:
Ticket 777.
To generate a diff of this commit:
cvs rdiff -u -r1.1.2.19 -r1.1.2.20 src/doc/CHANGES-5.1
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: src/doc/CHANGES-5.1
diff -u src/doc/CHANGES-5.1:1.1.2.19 src/doc/CHANGES-5.1:1.1.2.20
--- src/doc/CHANGES-5.1:1.1.2.19 Fri May 22 21:57:20 2009
+++ src/doc/CHANGES-5.1 Tue May 26 04:22:23 2009
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-5.1,v 1.1.2.19 2009/05/22 21:57:20 snj Exp $
+# $NetBSD: CHANGES-5.1,v 1.1.2.20 2009/05/26 04:22:23 snj Exp $
A complete list of changes from the NetBSD 5.0 release to the NetBSD 5.1
release:
@@ -609,3 +609,10 @@
Catch up with ticket 755.
[sborrill, ticket #773]
+dist/ntp/ntpd/ntp_crypto.c 1.15
+
+ Fix CVE-2009-1252: Buffer overflow in ntpd crypto code. A remote
+ attacker can send a specially constructed request packet that
+ would overflow the sprintf()'ed buffer causing ntpd to crash.
+ [dholland, ticket #777]
+
