mirror of
https://github.com/motioneye-project/motioneyeos.git
synced 2025-04-20 05:17:17 +00:00
ee4e8cf679
Fixes the following security issue: - MEDIUM: Sec 3661: Memory leak with CMAC keys Systems that use a CMAC algorithm in ntp.keys will not release a bit of memory on each packet that uses a CMAC key, eventually causing ntpd to run out of memory and fail. The CMAC cleanup from https://bugs.ntp.org/3447, part of ntp-4.2.8p11 and ntp-4.3.97, introduced a bug whereby the CMAC data structure was no longer completely removed. https://support.ntp.org/bin/view/Main/SecurityNotice#June_2020_ntp_4_2_8p15_NTP_Relea Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit d6d4557b7ac17339f705cfe0b37e2d7b0fce3e6d) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>