179 Commits

Author SHA256 Message Date
a1fa95d4a5 - Update source URL.
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=230
2025-08-29 11:56:23 +00:00
9b15fb5116 - bsc#1247587: Fix a crash when calling "sntp -d".
* ntp-sntp-assert.patch

OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=229
2025-08-29 11:46:51 +00:00
4903eb9c4f - Update to 4.2.8p18
* obsoletes Get-rid-of-EVP_MD_CTX_FLAG_NON_FIPS_ALLOW.patch
  * Multiple bug fixes and improvements. For details, see:
    /usr/share/doc/packages/ntp/ChangeLog
    http://www.ntp.org/support/securitynotice/4_2_8-series-changelog/  
- bsc#1233890: chown refclock device to ntp user on startup.
- ntp-check-argv.patch: Improve the handling of the process name of
  the forked-off DNS resolver process.

OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=227
2025-02-05 17:21:36 +00:00
986993b937 Accepting request 1177049 from home:kukuk:cleanup
- Drop initscripts-legacy support [jsc#PED264]
- Drop rc<service> symlinks [jsc#PED-264], [jsc#PED-266]

OBS-URL: https://build.opensuse.org/request/show/1177049
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=225
2024-06-25 14:29:09 +00:00
5b7e318201 Accepting request 1170274 from home:msmeissn:branches:network:time
- Get-rid-of-EVP_MD_CTX_FLAG_NON_FIPS_ALLOW.patch:
  Allow certain usages of MD5 in FIPS mode. (bsc#1222865)

OBS-URL: https://build.opensuse.org/request/show/1170274
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=223
2024-05-02 07:14:55 +00:00
1476cd3a0a Accepting request 1149485 from home:dimstar:rpm4.20:n
Prepare for RPM 4.20

OBS-URL: https://build.opensuse.org/request/show/1149485
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=221
2024-02-26 13:56:02 +00:00
5d868ff24e - Update to 4.2.8p17:
* Fix some regressions of 4.2.8p16
- Update to 4.2.8p16:
  * [Sec 3808] Assertion failure in ntpq on malformed RT-11 date
  * [Sec 3807], bsc#1210390, CVE-2023-26555:
    praecis_parse() in the Palisade refclock driver has a
    hypothetical input buffer overflow.
  * [Sec 3767] An OOB KoD RATE value triggers an assertion when
    debug is enabled.
  * Obsoletes: ntp-CVE-2023-26551.patch, ntp-sntp-dst.patch,
    ntp-ENOBUFS.patch
  * Multiple bug fixes and improvements. For details, see:
    /usr/share/doc/packages/ntp/ChangeLog
    http://www.ntp.org/support/securitynotice/4_2_8-series-changelog/
- Follow upstream's suggestion to build with debugging disabled:
  https://www.ntp.org/support/securitynotice/ntpbug3767/

OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=219
2023-06-07 16:38:34 +00:00
fb5d5a9ba7 - bsc#1210386: out-of-bounds writes in mstolfp()
* CVE-2023-26551, CVE-2023-26552, CVE-2023-26553, CVE-2023-26554
  * Add ntp-CVE-2023-26551.patch

OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=217
2023-05-05 14:04:05 +00:00
85aaed09ee - bsc#1208004: Make %post script SELinux aware
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=214
2023-02-08 12:18:33 +00:00
2c9d32acbf Accepting request 1061819 from home:dirkmueller:Factory
- run bash specific post with bash

OBS-URL: https://build.opensuse.org/request/show/1061819
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=212
2023-02-01 14:16:51 +00:00
ad4b2ef841 - boo#1207577: set /var/lib/ntp/var/run/ntp to 775
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=211
2023-01-26 16:46:37 +00:00
328c5a4f7a Accepting request 957171 from home:JonathanKang:branches:network:time
- Modified ntp.NetworkManager: Update ntp servers on
  dhcp4-change and dhcp6-change, instead of up condition. This is
  because ntp options are available during dhcp renewed or rebound,
  and not available when the interface has been activated
  (bsc#1171547).

OBS-URL: https://build.opensuse.org/request/show/957171
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=210
2022-02-24 07:15:18 +00:00
f84c72e28f osc copypac from project:openSUSE:Factory package:ntp revision:131
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=208
2022-01-17 07:01:36 +00:00
fe5104afeb OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=207 2022-01-17 07:00:34 +00:00
24128bf83e Accepting request 924895 from home:jsegitz:branches:systemdhardening:network:time
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort

OBS-URL: https://build.opensuse.org/request/show/924895
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=206
2021-10-12 14:21:49 +00:00
12a18b1f14 - bsc#1186431: Fix a typo in %post .
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=204
2021-06-15 16:14:39 +00:00
87893bfd13 - jsc#SLE-15482, ntp-clarify-interface.patch:
Adjust the documentation to clarify that "interface ignore all"
  does not cover the wildcard and localhost addresses.

OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=202
2021-05-20 11:05:53 +00:00
e4b3ba2140 Accepting request 882619 from home:ykurlaev:branches:network:time
- Change PIDFile path in the systemd unit file from /var/run
  /run to remove a warning from systemd.

OBS-URL: https://build.opensuse.org/request/show/882619
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=201
2021-04-06 14:56:01 +00:00
28416c473d - Disown /var/lib/ntp, it is now part of the sysuser-ntp package.
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=200
2021-03-02 12:50:41 +00:00
36dd07ed75 OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=198 2021-02-11 11:45:01 +00:00
65afacca00 OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=197 2021-02-11 11:42:52 +00:00
06cbc81f73 OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=196 2021-02-11 09:58:56 +00:00
75eed39db1 OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=195 2021-02-11 09:57:17 +00:00
1cca78e40c - bsc#1181788: Make the code for the service name change robust to
the simplified systemd-sysv-convert script.
- Fix systemd dependencies.

OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=194
2021-02-08 15:35:25 +00:00
a51acb2fae OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=193 2021-02-01 11:16:35 +00:00
46ef3f4a54 Accepting request 861809 from home:mnhauke
- Package statsdir /var/log/ntpstats/

- Let system-user-ntp handle the user/group generation 

- Introduce subpackage dcf77-tools
  * testdcf, a simple DCF77 raw impulse test program
  * dcfd, a simple DCF77 raw impulse receiver 
- Add patch testdcf-gude.diff
  * Improves testdcf's compatibility with GUDE DCF77 receivers

OBS-URL: https://build.opensuse.org/request/show/861809
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=192
2021-02-01 11:13:51 +00:00
9b272152f5 Accepting request 841479 from home:jengelh:branches:network:time
- Replace old specfile constructs. Do not suppress errors from useradd.

OBS-URL: https://build.opensuse.org/request/show/841479
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=191
2020-10-27 07:28:54 +00:00
63794fb5f2 - Silence an OpenSSL version warning (bsc#992038,
ntp-openssl-version.patch).

OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=189
2020-06-25 15:20:13 +00:00
e7408d5adb - Update to 4.2.8p15
- Fixed security issues:
  * bsc#1169740, CVE-2020-11868:
    DoS on client ntpd using server mode packet
  * bsc#1171355, CVE-2018-8956: remote attackers may prevent a
    broadcast client from synchronizing its clock with a broadcast
    NTP server via spoofed mode 3 and mode 5 packets.
  * bsc#1172651, CVE-2020-13817: vulnerable to off-path attack
  * bsc#1173334, CVE-2020-15025: Remote DoS when CMAC key is used
- Bugfixes in 4.2.8p15 and 4.2.8p14 include:
  * [Bug 3667] decodenetnum fails with numeric port
  * [Bug 3666] avoid unlimited receive buffer allocation
  * [Bug 3660] Manycast orphan mode startup discovery problem.
  * [Bug 3655] ntpdc memstats hash counts
  * [Bug 3653] Refclock jitter RMS calculation
  * [Bug 3646] Avoid sync with unsync orphan
  * [Bug 3644] Unsynchronized server [...] selected as candidate
  * [Bug 3636] NMEA: combine time/date from multiple sentences
  * [Bug 3635] Make leapsecond file hash check optional
  * [Bug 3628] raw DCF decoding - improve robustness
  * [Bug 3620] memory leak in ntpq sysinfo
  * [Bug 3619] Honour drefid setting in cooked mode and sysinfo
  * [Bug 3617] Add support for ACE III and Copernicus II receivers
  * [Bug 3615] accelerate refclock startup
  * [Bug 3613] Propagate noselect to mobilized pool servers
  * [Bug 3612] Use-of-uninitialized-value in receive function
  * [Bug 3611] NMEA time interpreted incorrectly
  * [Bug 3609] Fixing wrong falseticker in case of non-statistic jitter
  * [Bug 3604] Wrong param byte order passing into
    record_raw_stats() in ntp_io.c

OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=188
2020-06-25 14:02:05 +00:00
7f8b0f797e Accepting request 815962 from home:dimstar:Factory
Fix my own typo - sorry for that

OBS-URL: https://build.opensuse.org/request/show/815962
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=187
2020-06-19 18:22:54 +00:00
539748655c Accepting request 815414 from home:dimstar:Factory
- Properly ise %{_libexecdir} to package the legacy initscript
  action scripts.

OBS-URL: https://build.opensuse.org/request/show/815414
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=186
2020-06-19 13:43:01 +00:00
495adb74ce Accepting request 768067 from home:kukuk:branches:network:time
- Remove not used Pre/Post requires

OBS-URL: https://build.opensuse.org/request/show/768067
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=185
2020-01-28 16:14:17 +00:00
b3f7e8d288 Accepting request 718254 from home:mgerstner:branches:network:time
- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html

OBS-URL: https://build.opensuse.org/request/show/718254
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=184
2019-07-31 17:56:34 +00:00
eb27dae87f Accepting request 715455 from home:marxin:branches:openSUSE:Factory:Rings:1-MinimalX
- Update ntp-4.2.6p2-seed_file.patch in order to not return
  0 from in a void function.
- Use %make_build in order to provide verbose output.

OBS-URL: https://build.opensuse.org/request/show/715455
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=183
2019-07-16 12:08:06 +00:00
9ca9889e55 Accepting request 708087 from home:scarabeus_iv:branches:network:time
- Drop the omc config fate#301838:
  * it is obsolete since SLE11

OBS-URL: https://build.opensuse.org/request/show/708087
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=182
2019-06-11 07:51:05 +00:00
5ad52f29e0 Accepting request 695079 from home:kukuk:branches:network:time
- Don't source /etc/rc.status if we don't use it.

OBS-URL: https://build.opensuse.org/request/show/695079
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=181
2019-05-02 08:16:41 +00:00
55430266aa - Update ro 4.2.8p13
* CVE-2019-8936, bsc#1128525: Crafted null dereference attack in
    authenticated mode 6 packet.
  * Fix several bugs in the BANCOMM reclock driver.
  * Fix ntp_loopfilter.c snprintf compilation warnings.
  * Fix spurious initgroups() error message.
  * Fix STA_NANO struct timex units.
  * Fix GPS week rollover in libparse.
  * Fix incorrect poll interval in packet.
  * Add a missing check for ENABLE_CMAC.

OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=180
2019-03-11 16:01:00 +00:00
078996bcbc Accepting request 678071 from home:fbui:branches:network:time
- Drop use of $FIRST_ARG in ntp.spec
  The use of $FIRST_ARG was probably required because of the
  %service_* rpm macros were playing tricks on the shell positional
  parameters. This is bad practice and error prones so let's assume
  that no macros should do that anymore and hence it's safe to assume
  that positional parameters remains unchanged after any rpm macro
  call.

OBS-URL: https://build.opensuse.org/request/show/678071
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=179
2019-03-05 16:23:21 +00:00
e12f7c2c30 Accepting request 656782 from home:fbui:branches:network:time
- No more rely on /etc/insserv.conf for adding dependencies in
  ntpd.service against time-sync.target (boo#1118375)

OBS-URL: https://build.opensuse.org/request/show/656782
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=178
2018-12-12 16:20:50 +00:00
ac5e76ff1f * Add further tweaks to improve the fix for CVE-2018-7170,
bsc#1083424.

OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=177
2018-10-08 14:22:19 +00:00
1f337938cc - Update to 4.2.8p12
* CVE-2018-12327, bsc#1098531: fixed stack buffer overflow in
    the openhost() command-line call of NTPQ/NTPDC.
  * Further tweaks to improve the fix for CVE-2018-7170.
  * ntp-usrgrp-resolver.patch was integrated upstream.
- Don't run autoreconf anymore and remove all related hacks and
  BuildRequires.

OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=176
2018-10-08 14:16:15 +00:00
e33201ce24 - Refactor the key handling in %post so that it does not overwrite
user settings (bsc#1036505) and is more robust against ignored
  SIGPIPE (bsc#1090564).

OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=174
2018-04-24 15:43:29 +00:00
95c93244ce Accepting request 588327 from home:cboltz:branches:network:time
- change example statsdir in ntp.conf to /var/log/ntpstats/ to match
  the AppArmor profile (boo#1076247)

OBS-URL: https://build.opensuse.org/request/show/588327
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=173
2018-03-30 09:46:13 +00:00
306558346d Fix typo in changes
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=172
2018-03-14 09:03:19 +00:00
13b67f523e - Update to 4.2.8p11 (bsc#1082210):
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=171
2018-03-06 15:52:20 +00:00
f1b86df421 - Update to 4.2.8p10 (bsc#1082210):
* CVE-2016-1549: Sybil vulnerability: ephemeral association
    attack. While fixed in ntp-4.2.8p7, there are significant
    additional protections for this issue in 4.2.8p11.
  * CVE-2018-7182, bsc#1083426: ctl_getitem(): buffer read overrun
    leads to undefined behavior and information leak.
  * CVE-2018-7170, bsc#1083424: Multiple authenticated ephemeral
    associations.
  * CVE-2018-7184, bsc#1083422: Interleaved symmetric mode cannot
    recover from bad state.
  * CVE-2018-7185, bsc#1083420: Unauthenticated packet can reset
    authenticated interleaved association.
  * CVE-2018-7183, 1083417: ntpq:decodearr() can write beyond its
    buffer limit.
  * Obsoletes these patches: ntp-sntp-a.patch, ntp-warnings.patch
- Remove dead code from conf.start-ntpd (bsc#1082063).
- Don't use libevent's cached time stamps in sntp.
  (bsc#1077445, ntp-sntp-libevent.patch)

OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=170
2018-03-06 13:22:11 +00:00
1d7a2d532a - Add ntp-reproducible.patch to make build reproducible (boo#1047218)
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=169
2017-12-29 10:43:34 +00:00
5d9828f57c - Restart nptd if failed or aborted (FATE#315133).
- Do not try to set the HW clock when adding a server at runtime
  to avoid blocking systemd.

OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=168
2017-12-21 14:11:33 +00:00
a8381cb40f Accepting request 559102 from home:bmwiedemann:branches:network:time
Add ntp-4.2.8p10-reproducible.patch to make build reproducible (boo#1047218)

OBS-URL: https://build.opensuse.org/request/show/559102
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=167
2017-12-21 14:08:36 +00:00
6704a8562e Accepting request 544753 from home:RBrownSUSE:branches:network:time
Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)

OBS-URL: https://build.opensuse.org/request/show/544753
OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=166
2017-11-24 12:58:23 +00:00