linux/meta-openembedded.git/meta-networking/recipes-support/ntp, branch pyro

ntp: update to 4.2.8.p10

2017-04-25T14:24:47+00:00

LICENSE_FILE md5 changed do to copyright date change. NTF's NTP Project is releasing ntp-4.2.8p10, which addresses: 6 MEDIUM severity vulnerabilities (1 is about the Windows PPSAPI DLL) 5 LOW severity vulnerabilities (2 are in the Windows Installer) 4 Informational-level vulnerabilities 15 other non-security fixes and improvements All of the security issues in this release are listed in VU#633849. ntp-4.2.8p10 was released on 21 March 2017. Sec 3389 / CVE-2017-6464 / VU#325339: NTP-01-016 NTP: Denial of Service via Malformed Config (Pentest report 01.2017) Sec 3388 / CVE-2017-6462 / VU#325339: NTP-01-014 NTP: Buffer Overflow in DPTS Clock (Pentest report 01.2017) Sec 3387 / CVE-2017-6463 / VU#325339: NTP-01-012 NTP: Authenticated DoS via Malicious Config Option (Pentest report 01.2017) Sec 3386: NTP-01-011 NTP: ntpq_stripquotes() returns incorrect Value (Pentest report 01.2017) Sec 3385: NTP-01-010 NTP: ereallocarray()/eallocarray() underused (Pentest report 01.2017) Sec 3384 / CVE-2017-6455 / VU#325339: NTP-01-009 NTP: Windows: Privileged execution of User Library code (Pentest report 01.2017) Sec 3383 / CVE-2017-6452 / VU#325339: NTP-01-008 NTP: Windows Installer: Stack Buffer Overflow from Command Line (Pentest report 01.2017) Sec 3382 / CVE-2017-6459 / VU#325339: NTP-01-007 NTP: Windows Installer: Data Structure terminated insufficiently (Pentest report 01.2017) Sec 3381: NTP-01-006 NTP: Copious amounts of Unused Code (Pentest report 01.2017) Sec 3380: NTP-01-005 NTP: Off-by-one in Oncore GPS Receiver (Pentest report 01.2017) Sec 3379 / CVE-2017-6458 / VU#325339: NTP-01-004 NTP: Potential Overflows in ctl_put() functions (Pentest report 01.2017) Sec 3378 / CVE-2017-6451 / VU#325339: NTP-01-003 Improper use of snprintf() in mx4200_send() (Pentest report 01.2017) Sec 3377 / CVE-2017-6460 / VU#325339: NTP-01-002 Buffer Overflow in ntpq when fetching reslist (Pentest report 01.2017) Sec 3376: NTP-01-001 Makefile does not enforce Security Flags (Pentest report 01.2017) Sec 3361 / CVE-2016-9042 / VU#325339: 0rigin Signed-off-by: Armin Kuster Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

Make use of the new bb.utils.filter() function

2017-03-07T12:30:26+00:00

Signed-off-by: Peter Kjellerstedt Signed-off-by: Martin Jansa

ntp: update to version 4.8p9

2016-12-14T14:20:10+00:00

This fixes two CVE defects. Signed-off-by: Joe Slater Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

ntp : Add openssl to default PACKAGECONFIG options

2016-10-20T15:17:38+00:00

Add openssl to default PACKAGECONFIG options so ntp is configured to have crypto support by default. Signed-off-by: Jackie Huang Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

ntp: control ipv6 support based on DISTRO_FEATURES

2016-09-05T17:34:12+00:00

Add PACKAGECONFIG for ipv6 and control it based on DISTRO_FEATURES. Signed-off-by: Jackie Huang Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

ntp: make ntp and alternative for ntpd

2016-08-05T13:13:18+00:00

This way ntp can be used as an alternative to ntpd from busybox Signed-off-by: Pascal Bach Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

ntp: Security fixes via Upgrade to 4.2.8p8

2016-06-15T23:52:21+00:00

CVE-2016-4957 CVE-2016-4953 CVE-2016-4954 CVE-2016-4955 CVE-2016-4956 For more info to see: http://support.ntp.org/bin/view/Main/SecurityNotice#June_2016_ntp_4_2_8p8_NTP_Securi Signed-off-by: Fan Xin Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

ntp: avoid floating dependency on mdns (aka mDNSResponder)

2016-06-01T23:35:50+00:00

An mdns package is provided by meta-intel-iot-middleware. Signed-off-by: Andre McCurdy Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

ntp: Security fixes via update to 4.2.8p7

2016-05-05T15:41:28+00:00

CVE-2016-1551 CVE-2016-2516 CVE-2016-2517 CVE-2016-2518 CVE-2016-2519 CVE-2016-1547 CVE-2015-7704 CVE-2015-8138 CVE-2016-1550 for more info see: http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security Signed-off-by: Armin Kuster Acked-by: Joe MacDonald Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

ntp: remove empty libexecdir to prevent potential QA issues

2016-02-29T21:23:34+00:00

Depending on the configuration used to build ntp it is possible to have an empty libexecdir. This can cause QA issues. Add a test at the end of install() to remove libexecdir if it is empty, thus avoiding the possibility of QA issues, regardless of configuration. Signed-off-by: Mark Asselstine Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald