e2a83bcab4
avoid the impression that ntpd is started twice. (bsc#979302, ntp-processname.patch). - Don't ignore SIGCHILD because it breaks wait() (boo#981422, ntp-sigchld.patch). - Fix the TZ offset output of sntp during DST. (bsc#951559, ntp-sntp-dst.patch)
Reinhard Max2016-06-07 13:47:34 +00:00
0ac1da7616
- Keep the parent process alive until the daemon has finished initialisation, to make sure that the PID file exists when the parent returns (ntp-daemonize.patch). - Update to 4.2.8p8 (bsc#982056): * CVE-2016-4953, bsc#982065: Bad authentication demobilizes ephemeral associations. * CVE-2016-4954, bsc#982066: Processing spoofed server packets. * CVE-2016-4955, bsc#982067: Autokey association reset. * CVE-2016-4956, bsc#982068: Broadcast interleave. * CVE-2016-4957, bsc#982064: CRYPTO_NAK crash. - Change the process name of the forking DNS worker process to avoid the impression that ntpd is started twice (bsc#979302). - Don't ignore SIGCHILD because it breaks wait() (boo#981422). - ntp-wait does not accept fractional seconds, so use 1 instead of 0.2 in ntp-wait.service (boo#979981). - Separate the creation of ntp.keys and key #1 in it to avoid problems when upgrading installations that have the file, but no key #1, which is needed e.g. by "rcntp addserver". - Fix the TZ offset output of sntp during DST (bsc#951559). - Add /var/db/ntp-kod (bsc#916617). - Add ntp-ENOBUFS.patch to limit a warning that might happen quite a lot on loaded systems (bsc#956773). - Don't wait for 11 minutes to restart ntpd when it has died (boo#894031).
Reinhard Max2016-06-07 10:20:34 +00:00
4d1ce8aa3d
- Update to 4.2.8p7 (bsc#977446): * CVE-2016-1547, bsc#977459: Validate crypto-NAKs, AKA: CRYPTO-NAK DoS. * CVE-2016-1548, bsc#977461: Interleave-pivot * CVE-2016-1549, bsc#977451: Sybil vulnerability: ephemeral association attack. * CVE-2016-1550, bsc#977464: Improve NTP security against buffer comparison timing attacks. * CVE-2016-1551, bsc#977450: Refclock impersonation vulnerability * CVE-2016-2516, bsc#977452: Duplicate IPs on unconfig directives will cause an assertion botch in ntpd. * CVE-2016-2517, bsc#977455: remote configuration trustedkey/ requestkey/controlkey values are not properly validated. * CVE-2016-2518, bsc#977457: Crafted addpeer with hmode > 7 causes array wraparound with MATCH_ASSOC. * CVE-2016-2519, bsc#977458: ctl_getitem() return value not always checked. * integrate ntp-fork.patch * Improve the fixes for: CVE-2015-7704, CVE-2015-7705, CVE-2015-7974 - Restrict the parser in the startup script to the first occurrance of "keys" and "controlkey" in ntp.conf (boo#957226). - Depend on pps-tools-devel to provide timepps.h header to enable Linux PPSAPI support to make GPS devices usefull. (boo#977563)
Reinhard Max2016-05-04 15:18:21 +00:00
60f3e43ccd
- Fix ntp-4.2.6p2-ntpq-speedup-782060.patch to not pick arbitraty port numbers (bsc#782060).
Reinhard Max2015-11-06 09:57:29 +00:00
8adcef5ee3
- Update to 4.2.8p4 to fix several security issues (bsc#951608): * CVE-2015-7871: NAK to the Future: Symmetric association authentication bypass via crypto-NAK * CVE-2015-7855: decodenetnum() will ASSERT botch instead of returning FAIL on some bogus values * CVE-2015-7854: Password Length Memory Corruption Vulnerability * CVE-2015-7853: Invalid length data provided by a custom refclock driver could cause a buffer overflow * CVE-2015-7852 ntpq atoascii() Memory Corruption Vulnerability * CVE-2015-7851 saveconfig Directory Traversal Vulnerability * CVE-2015-7850 remote config logfile-keyfile * CVE-2015-7849 trusted key use-after-free * CVE-2015-7848 mode 7 loop counter underrun * CVE-2015-7701 Slow memory leak in CRYPTO_ASSOC * CVE-2015-7703 configuration directives "pidfile" and "driftfile" should only be allowed locally * CVE-2015-7704, CVE-2015-7705 Clients that receive a KoD should validate the origin timestamp field * CVE-2015-7691, CVE-2015-7692, CVE-2015-7702 Incomplete autokey data packet length checks * obsoletes ntp-memlock.patch. - Add a controlkey line to /etc/ntp.conf if one does not already exist, to allow runtime configuration via ntpq. - Use SHA1 instead of MD5 for symmetric keys (bsc#905885). - Improve runtime configuration: * Read keytype from ntp.conf * Don't write ntp keys to syslog. - Fix legacy action scripts to pass on command line arguments. - Remove ntp.1.gz, it wasn't installed anymore. - Remove ntp-4.2.7-rh-manpages.tar.gz and only keep ntptime.8.gz. The rest is partially irrelevant, partially redundant and potentially outdated (bsc#942587). - Remove "kod" from the restrict line in ntp.conf (bsc#944300).
Reinhard Max2015-10-29 18:01:11 +00:00
5ca1cc3ac2
- Add "addserver" as a new legacy action. - Fix the comment regarding addserver in ntp.conf (bnc#910063).
Reinhard Max2015-09-04 09:25:27 +00:00
1132ff0513
Accepting request 324699 from network:time
Stephan Kulow
2015-08-25 05:17:11 +00:00
22ed701370
- Use ntpq instead of deprecated ntpdc in start-ntpd (bnc#936327). - Add a controlkey to ntp.conf to make the above work. - Don't let "keysdir" lines in ntp.conf trigger the "keys" parser. - Disable mode 7 (ntpdc) again, now that we don't use it anymore.
Reinhard Max2015-08-13 15:57:16 +00:00
2809258650
Accepting request 318177 from network:time
Stephan Kulow
2015-07-25 05:43:46 +00:00
8c81496f9d
- Update to version 4.2.8p3 which incorporates all security fixes and most other patches we have so far (fate#319040). More information on: http://archive.ntp.org/ntp4/ChangeLog-stable - Disable chroot by default (bnc#926510). - Enable ntpdc for backwards compatibility (bnc#920238).
Reinhard Max2015-07-16 12:56:00 +00:00
5bfa03e51d
- bnc#910764: VU#852879 ntp security fixes * A potential remote code execution problem was found inside ntpd. The functions crypto_recv() (when using autokey authentication), ctl_putdata(), and configure() where updated to avoid buffer overflows that could be exploited. (CVE-2014-9295) * Furthermore a problem inside the ntpd error handling was found that is missing a return statement. This could also lead to a potentially attack vector. (CVE-2014-9296) - ntp-CVE-2014-9295.patch and ntp-CVE-2014-9296.patch will be obsoleted by the upcoming update to version 4.2.8.
Reinhard Max2014-12-19 18:12:58 +00:00
db5ce794db
Accepting request 230849 from home:seife:branches:network:time
Reinhard Max2014-04-23 11:30:55 +00:00
c2aee51f97
Accepting request 228827 from network:time
Stephan Kulow
2014-04-05 12:43:04 +00:00
ddee41d700
Accepting request 228826 from home:WernerFink:branches:network:time
Reinhard Max2014-04-03 07:57:09 +00:00
9b6daa59a3
Accepting request 227813 from home:WernerFink:branches:network:time
Reinhard Max2014-03-28 06:25:07 +00:00
24cff6c538
- Add systemd configuration and start script
Peter Varkoly2014-03-04 10:58:37 +00:00
157f3c7be6
Accepting request 222347 from network:time
Stephan Kulow
2014-02-15 16:17:27 +00:00
2899d634f9
- bnc#863815, ntp-sntp-recverr.patch: Get sntp to recognize socket errors, so that it skips unreachable destinations immediately instead of trying to reach them for more than five minutes before finally timing out. This patch will probably be obsoleted by the next major upgrade, because the current development release takes a different approach to get a quick answer from one of the specified servers.
Reinhard Max2014-02-14 11:43:19 +00:00
3bab0ef396
Accepting request 214511 from network:time
Stephan Kulow
2014-01-21 11:29:44 +00:00
b063730028
Bug 857195 - VUL-0: CVE-2013-5211: ntp: DoS in monlist feature in ntpd
Reinhard Max2014-01-20 16:45:03 +00:00
f7a6a3505b
Accepting request 204325 from network:time
Tomáš Chvátal
2013-10-23 08:10:51 +00:00
58adc75328
- bnc#838458 ntp start script does not update /var/lib/ntp/etc/localtime file if /etc/localtime is symlink
Peter Varkoly2013-10-22 14:49:46 +00:00
d650c9a609
Accepting request 196291 from network:time
Stephan Kulow
2013-08-27 18:53:28 +00:00
f8c3964fac
Accepting request 195641 from home:elvigia:branches:network:time
Tomáš Chvátal
2013-08-25 11:04:02 +00:00
2c105068f7
Accepting request 158201 from network:time
Stephan Kulow
2013-03-11 06:25:38 +00:00
1872914f65
Accepting request 156793 from network:time
Stephan Kulow
2013-03-01 11:26:20 +00:00
d5b11bea7f
- bnc#797351 - ntpd "listen-on" directive support is missing/broken; unable to restrict/secure listening IPs
Peter Varkoly2013-02-28 07:53:01 +00:00
93e0121f9c
bnc#793012 - NTP default to 'sync time on startup' conflicts with NetworkManager
Peter Varkoly2013-02-26 14:58:50 +00:00
0e75a214e2
bnc#793012 - NTP default to 'sync time on startup' conflicts with NetworkManager
Peter Varkoly2013-02-26 14:55:46 +00:00
ac6f3f6777
Accepting request 156338 from network:time
Stephan Kulow
2013-02-25 19:39:23 +00:00
95d283c780
- bnc#774553 - ntp initscript: hwclock: With --noadjfile, you must specify either --utc or --localtime - bnc#450196 - ext3 - recovering journal on / on first boot on new kernel/fresh system updates
Peter Varkoly2013-01-17 17:40:00 +00:00
2ebc997892
Accepting request 130555 from openSUSE:Maintenance:743
Stephan Kulow
2012-10-24 15:09:46 +00:00
268ad9933d
bnc#774553 - ntp initscript: hwclock: With --noadjfile, you must specify either --utc or --localtime 450196 - ext3 - recovering journal on / on first boot on new kernel/fresh system updates
Peter Varkoly2012-08-10 10:16:14 +00:00
41fd708773
Accepting request 128294 from home:elvigia:branches:network:time
Stephan Kulow
2012-07-24 14:52:11 +00:00
4b4826b260
Accepting request 127215 from network:time
Stephan Kulow
2012-07-09 07:57:22 +00:00
767251e0c0
Accepting request 127106 from home:babelworx:ldig:branches:network:time
Stephan Kulow
2012-07-05 19:14:19 +00:00
b8462246d9
Accepting request 116236 from network:time
Stephan Kulow
2012-05-08 04:47:01 +00:00
c749f54a83
- bnc#758253 - L3: ntp fails if host has more than 1024 IP-addresses ntp#1180 - ntpd won't start with more than 1000 interfaces
Peter Varkoly2012-04-23 11:07:40 +00:00
a7931e5ed9
Accepting request 101501 from network:time
Stephan Kulow
2012-01-26 13:06:39 +00:00
dec6ae2ce3
Accepting request 99525 from home:lmuelle:branches:network:time
Peter Varkoly2012-01-25 13:34:18 +00:00
4b54bc9a0d
replace license with spdx.org variant
Stephan Kulow
2011-12-06 17:32:44 +00:00
08f4f8fd9f
Updating link to change in openSUSE:Factory/ntp revision 64.0
OBS User buildservice-autocommit
2011-12-06 17:32:44 +00:00
9ab29b9fc5
Accepting request 93607 from network:time
Stephan Kulow
2011-11-25 22:12:16 +00:00
70e68ea38a
Accepting request 93605 from home:coolo:removelibtool
Stephan Kulow
2011-11-25 11:34:57 +00:00
e7d0a2be1a
- bnc#730374 - Hardware Clock does not get synchronized
Peter Varkoly2011-11-24 15:57:28 +00:00
00b22a062f
Accepting request 89486 from network:time
Stephan Kulow
2011-10-27 11:49:51 +00:00
d0b2b20dab
- bnc#656509 - don't use --bind on /var/lib/ntp/proc
Peter Varkoly2011-10-27 08:53:35 +00:00
0197cc730a
Autobuild autoformatter for 79859
Sascha Peilicke
2011-08-26 10:48:54 +00:00
OBS User unknown
Dominique Leuenberger
Martin Pluskal
Reinhard Max
Stephan Kulow
Tomáš Chvátal
Peter Varkoly
Ismail Dönmez