<html lang='en'>
<head>
<meta content='text/html; charset=utf-8' http-equiv='Content-Type'>
<title>
GitLab
</title>
</meta>
</head>
<style>
img {
max-width: 100%;
height: auto;
}
p.details {
font-style:italic;
color:#777
}
.footer p {
font-size:small;
color:#777
}
pre.commit-message {
white-space: pre-wrap;
}
.file-stats a {
text-decoration: none;
}
.file-stats .new-file {
color: #090;
}
.file-stats .deleted-file {
color: #B00;
}
</style>
<body>
<div class='content'>
<h3>
Eric S. Raymond pushed to branch master
at <a href="https://gitlab.com/NTPsec/ntpsec">NTPsec / ntpsec</a>
</h3>
<h4>
Commits:
</h4>
<ul>
<li>
<strong><a href="https://gitlab.com/NTPsec/ntpsec/commit/f89db1c8956b225c356f976c980866e360284080">f89db1c8</a></strong>
<div>
<span>by Matt Selsky</span>
<i>at 2016-01-23T04:36:03-05:00</i>
</div>
<pre class='commit-message'>Fix typos in NEWS</pre>
</li>
<li>
<strong><a href="https://gitlab.com/NTPsec/ntpsec/commit/c4865379fcbc486acbff487cc24b57818c60b232">c4865379</a></strong>
<div>
<span>by Eric S. Raymond</span>
<i>at 2016-01-23T17:26:48+00:00</i>
</div>
<pre class='commit-message'>Merge branch 'typos' into 'master'
Fix typo in NEWS
See merge request !15</pre>
</li>
</ul>
<h4>1 changed file:</h4>
<ul>
<li class='file-stats'>
<a href='#diff-0'>
NEWS
</a>
</li>
</ul>
<h4>Changes:</h4>
<li id='diff-0'>
<a href='https://gitlab.com/NTPsec/ntpsec/compare/592f0e8e9b1ca23118abe05c7b83e50aa340a1d3...c4865379fcbc486acbff487cc24b57818c60b232#diff-0'>
<strong>
NEWS
</strong>
</a>
<hr>
<pre class="highlight"><code><span style="color: #000000;background-color: #ffdddd">--- a/NEWS
</span><span style="color: #000000;background-color: #ddffdd">+++ b/NEWS
</span><span style="color: #aaaaaa">@@ -24,14 +24,14 @@ Point release for security. Fixes:
</span> * Timing attack on MAC verification (Daniel Franke)
* Missing length checks in decodearr() and outputarr() (Daniel Franke)
<span style="color: #000000;background-color: #ffdddd">-Two additional security issues hve been reported to us for which we
</span><span style="color: #000000;background-color: #ddffdd">+Two additional security issues have been reported to us for which we
</span> are not implementing code changes, but the user should be aware of
their impact.
The first (CVE-2015-8140) pertains to NTP's dynamic reconfiguration
feature, which permits on-the-fly modification of NTP's configuration
via ntpq. This feature is rarely used, typically disabled, and can
<span style="color: #000000;background-color: #ffdddd">-only be enabled when authentication is configured. Ntpd has no means
</span><span style="color: #000000;background-color: #ddffdd">+only be enabled when authentication is configured. ntpd has no means
</span> of detecting that a request to change its configuration is a replay of
an old packet. Therefore, if an administrator sets ntpd to
configuration A and then to configuration B, an attacker who captures
</code></pre>
<br>
</li>
</div>
<div class='footer' style='margin-top: 10px;'>
<p>
—
<br>
<a href="https://gitlab.com/NTPsec/ntpsec/compare/592f0e8e9b1ca23118abe05c7b83e50aa340a1d3...c4865379fcbc486acbff487cc24b57818c60b232">View it on GitLab</a>.
<br>
You're receiving this email because of your account on gitlab.com.
If you'd like to receive fewer emails, you can
adjust your notification settings.
</p>
</div>
</body>
</html>