Subject: CVS commit: [pkgsrc-2014Q4] pkgsrc/net/ntp4
From: Hiramatsu Yoshifumi
Date: 2015-04-01 20:11:56
Message id: 20150401181156.9566498@cvs.netbsd.org

Log Message:
Pullup ticket #4649 - requested by bsiegert
net/ntp4: security update

Revisions pulled up:
- net/ntp4/Makefile                                             1.84
- net/ntp4/PLIST                                                1.17
- net/ntp4/distinfo                                             1.20
- net/ntp4/patches/patch-ntpd_ntp__io.c                         deleted

---
   Module Name:    pkgsrc
   Committed By:   bsiegert
   Date:           Sat Mar 21 20:49:28 UTC 2015

   Modified Files:
           pkgsrc/net/ntp4: Makefile PLIST distinfo
   Removed Files:
           pkgsrc/net/ntp4/patches: patch-ntpd_ntp__io.c

   Log Message:
   SECURITY: Update ntpd to 4.2.8p1.

   * [Sec 2671] vallen in extension fields are not validated.
   * [Sec 2672] On some OSes ::1 can be spoofed, bypassing source IP ACLs.

Files:
RevisionActionfile
1.82.2.1modifypkgsrc/net/ntp4/Makefile
1.16.2.1modifypkgsrc/net/ntp4/PLIST
1.19.2.1modifypkgsrc/net/ntp4/distinfo
1.1removepkgsrc/net/ntp4/patches/patch-ntpd_ntp__io.c