jca b26c4cef49 Update to ntp-4.2.8, fixes for several CVEs. ...

- Weak default key in config_auth() - CVE-2014-9293
- non-cryptographic random number generator with weak seed used by
  ntp-keygen to generate symmetric keys - CVE-2014-9294
- Buffer overflow in crypto_recv() - CVE-2014-9295
- Buffer overflow in ctl_putdata() - CVE-2014-9295
- Buffer overflow in configure() - CVE-2014-9295
- receive(): missing return on error - CVE-2014-9296

ok naddy@

2014-12-24 14:05:25 +00:00

..

patch-include_ntp_worker_h

…

patch-libparse_info_trimble_c

…

patch-ntpd_ntp_io_c

Update to ntp-4.2.8, fixes for several CVEs.

2014-12-24 14:05:25 +00:00