linux/meta-openembedded.git/meta-networking/recipes-support/ntp, branch krogoth-next

ntp: Security fixes via Upgrade to 4.2.8p8

2016-08-16T17:29:40+00:00

CVE-2016-4957 CVE-2016-4953 CVE-2016-4954 CVE-2016-4955 CVE-2016-4956 For more info to see: http://support.ntp.org/bin/view/Main/SecurityNotice#June_2016_ntp_4_2_8p8_NTP_Securi Signed-off-by: Fan Xin Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald (cherry picked from commit 13db3c65f525a6c87cd51961c3c1816e059478b9) Signed-off-by: Armin Kuster

ntp: avoid floating dependency on mdns (aka mDNSResponder)

2016-08-16T17:29:39+00:00

An mdns package is provided by meta-intel-iot-middleware. Signed-off-by: Andre McCurdy Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald (cherry picked from commit 9a13040d7b10b9f7221f8190e75aa249bfacee9d) Signed-off-by: Armin Kuster

ntp: Security fixes via update to 4.2.8p7

2016-05-02T21:04:13+00:00

CVE-2016-1551 CVE-2016-2516 CVE-2016-2517 CVE-2016-2518 CVE-2016-2519 CVE-2016-1547 CVE-2015-7704 CVE-2015-8138 CVE-2016-1550 for more info see: http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security Signed-off-by: Armin Kuster Acked-by: Joe MacDonald

ntp: remove empty libexecdir to prevent potential QA issues

2016-02-29T21:23:34+00:00

Depending on the configuration used to build ntp it is possible to have an empty libexecdir. This can cause QA issues. Add a test at the end of install() to remove libexecdir if it is empty, thus avoiding the possibility of QA issues, regardless of configuration. Signed-off-by: Mark Asselstine Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

ntp: update 4.2.8p6

2016-02-22T20:51:19+00:00

QA error fix: ERROR: QA Issue: ntp: Files/directories were installed but not shipped in any package: /usr/libexec CVES addressed: Bug 2948 / CVE-2015-8158 Bug 2945 / CVE-2015-8138: origin: Zero Origin Timestamp Bypass Bug 2942 / CVE-2015-7979: Off-path Denial of Service (DoS) attack on authenticated broadcast mode Bug 2940 / CVE-2015-7978: Stack exhaustion in recursive traversal of restriction list Bug 2939 / CVE-2015-7977: reslist NULL pointer dereference Bug 2938 / CVE-2015-7976: ntpq saveconfig command allows dangerous characters in filenames Bug 2937 / CVE-2015-7975: nextvar() missing length check Bug 2936 / CVE-2015-7974: Skeleton Key: Missing key check allows impersonation between authenticated peers Bug 2935 / CVE-2015-7973: Deja Vu: Replay attack on authenticated broadcast mode Bug 2947 / CVE-2015-8140: ntpq vulnerable to replay attacks Bug 2946 / CVE-2015-8139: Origin Leak: ntpq and ntpdc, disclose origin NTP-4.2.8p5 NtpBug2956: Small-step/Big-step CVE-2015-5300 Bug #2829 Clean up pipe_fds in ntpd.c Bug #2887 stratum -1 config results as showing value 99. Bug #2932 Update leapsecond file info in miscopt.html. Bug #2934 tests/ntpd/t-ntp_scanner.c has a magic constant wired in. Bug #2944 errno is not preserved properly in ntpdate after sendto call. Bug #2952 peer associations were broken by the fix for NtpBug2901 CVE-2015-7704 Bug #2954 Version 4.2.8p4 crashes on startup on some OSes. Bug #2957 'unsigned int' vs 'size_t' format clash. Bug #2958 ntpq: fatal error messages need a final newline. Bug #2962 truncation of size_t/ptrdiff_t on 64bit targets. Bug #2965 Local clock didn't work since 4.2.8p4. Bug #2967 ntpdate command suffers an assertion failure Bug #2969 Seg fault from ntpq/mrulist when looking at server with lots of clients. Bug #2971 ntpq bails on ^C: select fails: Interrupted system call Signed-off-by: Armin Kuster Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

ntp: upgrade 4.2.8p3 -> 4.2.8p4

2015-11-11T11:12:08+00:00

4.2.8p4 fixed following 13 low- and medium-severity vulnerabilities: * Bug 2941 CVE-2015-7871 * Bug 2922 CVE-2015-7855 * Bug 2921 CVE-2015-7854 * Bug 2920 CVE-2015-7853 * Bug 2919 CVE-2015-7852 * Bug 2918 CVE-2015-7851 * Bug 2917 CVE-2015-7850 * Bug 2916 CVE-2015-7849 * Bug 2913 CVE-2015-7848 * Bug 2909 CVE-2015-7701 * Bug 2902 CVE-2015-7703 * Bug 2901 CVE-2015-7704, CVE-2015-7705 * Bug 2899 CVE-2015-7691, CVE-2015-7692, CVE-2015-7702 And three bugs: Bug 2382, 1774, 1593 Details at: http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities Signed-off-by: Wenzong Fan Signed-off-by: Martin Jansa

ntp: fix rpath QA issue

2015-10-21T19:59:04+00:00

When ntp could be correctly built with openssh and libcrypto, we would meet the following QA issue. WARNING: QA Issue: package ntp contains bad RPATH ... [rpath] Fix this problem by adding '--disable-rpath' to EXTRA_OECONF. Signed-off-by: Chen Qi Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

ntp: upgrade 4.2.8p2 -> 4.2.8p3

2015-08-06T19:44:09+00:00

4.2.8p3 fixed CVE-2015-5146 and Bugs. Signed-off-by: Li Xin Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

meta-networking: standardize SECTION values

2015-06-06T00:42:25+00:00

SECTION has been used inconsistently throughout the recipes in this layer. Convert them to all use the same convention. Signed-off-by: Joe MacDonald

ntp: control refclock driver support via PACKAGECONFIG

2015-05-13T15:57:48+00:00

The default configuration of ntp includes a large number of reference clock drivers. Provide a PACKAGECONFIG to allow control over whether or not these refclock drivers are built. Leave enabled by default. http://doc.ntp.org/4.2.8/refclock.html Signed-off-by: Andre McCurdy Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald