CVS commit: [pkgsrc-2013Q2] pkgsrc/net/chrony

["Matthias Scheler" <tron%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   tron
Date:           Wed Aug 21 12:59:44 UTC 2013

Modified Files:
        pkgsrc/net/chrony [pkgsrc-2013Q2]: Makefile PLIST distinfo
        pkgsrc/net/chrony/files [pkgsrc-2013Q2]: chronyd.sh
        pkgsrc/net/chrony/patches [pkgsrc-2013Q2]: patch-aa patch-ab patch-ac
            patch-ad patch-ae patch-af
Added Files:
        pkgsrc/net/chrony/patches [pkgsrc-2013Q2]: patch-ag

Log Message:
Pullup ticket #4215 - requested by hannken
net/chrony: security update

Revisions pulled up:
- net/chrony/Makefile                                           1.29
- net/chrony/PLIST                                              1.5
- net/chrony/distinfo                                           1.8
- net/chrony/files/chronyd.sh                                   1.5
- net/chrony/patches/patch-aa                                   1.5
- net/chrony/patches/patch-ab                                   1.5
- net/chrony/patches/patch-ac                                   1.5
- net/chrony/patches/patch-ad                                   1.4
- net/chrony/patches/patch-ae                                   1.5
- net/chrony/patches/patch-af                                   1.4
- net/chrony/patches/patch-ag                                   1.4

---
   Module Name:    pkgsrc
   Committed By:   hannken
   Date:           Fri Aug 16 08:30:20 UTC 2013

   Modified Files:
           pkgsrc/net/chrony: Makefile PLIST distinfo
           pkgsrc/net/chrony/files: chronyd.sh
           pkgsrc/net/chrony/patches: patch-aa patch-ab patch-ac patch-ad 
patch-ae
               patch-af
   Added Files:
           pkgsrc/net/chrony/patches: patch-ag

   Log Message:
   Update chrony to version 1.29. For a full list of changes
   since 1.24 see file NEWS in the distfile.

   Security fixes since 1.24:

   * Fix crash when processing crafted commands (CVE-2012-4502)
     (possible with IP addresses allowed by cmdallow and localhost)
   * Don't send uninitialized data in SUBNETS_ACCESSED and CLIENT_ACCESSES
     replies (CVE-2012-4503) (not used by chronyc)

   Reviewed by: Joerg Sonnenberger <joerg%netbsd.org@localhost>


To generate a diff of this commit:
cvs rdiff -u -r1.27 -r1.27.6.1 pkgsrc/net/chrony/Makefile
cvs rdiff -u -r1.4 -r1.4.34.1 pkgsrc/net/chrony/PLIST
cvs rdiff -u -r1.7 -r1.7.28.1 pkgsrc/net/chrony/distinfo
cvs rdiff -u -r1.4 -r1.4.84.1 pkgsrc/net/chrony/files/chronyd.sh
cvs rdiff -u -r1.4 -r1.4.28.1 pkgsrc/net/chrony/patches/patch-aa \
    pkgsrc/net/chrony/patches/patch-ab pkgsrc/net/chrony/patches/patch-ac \
    pkgsrc/net/chrony/patches/patch-ae
cvs rdiff -u -r1.3 -r1.3.28.1 pkgsrc/net/chrony/patches/patch-ad
cvs rdiff -u -r1.3 -r1.3.64.1 pkgsrc/net/chrony/patches/patch-af
cvs rdiff -u -r0 -r1.3.8.1 pkgsrc/net/chrony/patches/patch-ag

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.