Path to this page:
Subject: CVS commit: pkgsrc/net/chrony
From: Juergen Hannken-Illjes
Date: 2013-08-16 10:30:20
Message id: 20130816083020.B6ECE96@cvs.netbsd.org
Log Message:
Update chrony to version 1.29. For a full list of changes
since 1.24 see file NEWS in the distfile.
Security fixes since 1.24:
* Fix crash when processing crafted commands (CVE-2012-4502)
(possible with IP addresses allowed by cmdallow and localhost)
* Don't send uninitialized data in SUBNETS_ACCESSED and CLIENT_ACCESSES
replies (CVE-2012-4503) (not used by chronyc)
Reviewed by: Joerg Sonnenberger <joerg@netbsd.org>
Files: