Merge branch '1.31-security'

Conflicts:
	NEWS
	ntp_core.c
This commit is contained in:
Miroslav Lichvar
2015-04-07 15:34:39 +02:00
3 changed files with 21 additions and 6 deletions

10
NEWS
View File

@@ -29,6 +29,16 @@ Bug fixes
is equal to server port
* Fix allocation of slots saving replies to authenticated commands
New in version 1.31.1
=====================
Security fixes
--------------
* Protect authenticated symmetric NTP associations against DoS attacks
(CVE-2015-1799)
* Fix access configuration with subnet size indivisible by 4 (CVE-2015-1821)
* Fix initialization of reply slots for authenticated commands (CVE-2015-1822)
New in version 1.31
===================