linux/meta-openembedded.git/meta-networking/recipes-support/ntp, branch styhead

ntp: Fix status call reporting incorrect value

2024-09-18T16:52:30+00:00

The "status" function called by this script calls "pidof" to get the process id. "pidof" does not expect or operate with a full path. Signed-off-by: Khem Raj

ntp: upgrade 4.2.8p17 -> 4.2.8p18

2024-06-07T16:11:59+00:00

License-Update: Copyright year updated to 2024. Changelog: =========== - changes crypto (OpenSSL or compatible) detection and default build behavior. Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

recipes: Start WORKDIR -> UNPACKDIR transition

2024-05-23T15:44:44+00:00

Replace references of WORKDIR with UNPACKDIR where it makes sense to do so in preparation for changing the default value of UNPACKDIR. Signed-off-by: Khem Raj

ntp: add missing runtime dependencies

2023-09-07T15:22:43+00:00

Some perl modules are required by ntptrace: $ ntptrace Can't locate lib.pm in @INC (you may need to install the lib module) (@INC contains: /usr/lib/perl5/site_perl/5.36.0/x86_64-linux /usr/lib/perl5/site_perl/5.36.0 /usr/lib/perl5/vendor_perl/5.36.0/x86_64-linux /usr/lib/perl5/vendor_perl/5.36.0 /usr/lib/perl5/5.36.0/x86_64-linux /usr/lib/perl5/5.36.0) at /usr/sbin/ntptrace line 10. BEGIN failed--compilation aborted at /usr/sbin/ntptrace line 10. Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

cve_check: convert CVE_CHECK_IGNORE to CVE_STATUS

2023-07-27T15:54:40+00:00

- Try to add convert and apply statuses for old CVEs - Drop some obsolete ignores, while they are not relevant for current version Signed-off-by: Andrej Valek Signed-off-by: Khem Raj

*.patch: add Upstream-Status to all patches

2023-06-21T16:15:20+00:00

There is new patch-status QA check in oe-core: https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a This is temporary work around just to hide _many_ warnings from optional patch-status (if you add it to WARN_QA). This just added Upstream-Status: Pending everywhere without actually investigating what's the proper status. This is just to hide current QA warnings and to catch new .patch files being added without Upstream-Status, but the number of Pending patches is now terrible: 5 (26%) meta-xfce 6 (50%) meta-perl 15 (42%) meta-webserver 21 (36%) meta-gnome 25 (57%) meta-filesystems 26 (43%) meta-initramfs 45 (45%) meta-python 47 (55%) meta-multimedia 312 (63%) meta-networking 756 (61%) meta-oe Signed-off-by: Martin Jansa Signed-off-by: Khem Raj

ntpd: switch service type from forking to simple

2023-06-15T17:28:20+00:00

Type=forking means systemd waits untill the main process, /usr/sbin/ntpd in this case, has exited. However, the ntpd daemon does not seem to call fork() or vfork() and runs endlessly untill killed. Eventually, this causes systemd to trigger a timeout, and the ntpd service is killed. All the while, "systemctl status ntpd" shows "activating (start)" instead of "active (running)". This is fixed by switching Type=forking to Type=simple. Reading ntpd(8) shows that the "-n" option requests ntpd not to fork, so also use that to be safe. Finally, there is no need anymore to keep a pidfile around. Signed-off-by: Johannes Kauffmann Signed-off-by: Khem Raj

ntp: upgrade 4.2.8p16 -> 4.2.8p17

2023-06-14T16:41:35+00:00

Changelog: =========== * [Bug 3824] Spurious "ntpd: daemon failed to notify parent!" logged at event_sync. * [Bug 3822] ntpd significantly delays first poll of servers specified by name. * [Bug 3821] 4.2.8p16 misreads hex authentication keys, won't interop with 4.2.8p15 or earlier. * Add tests/libntp/digests.c to catch regressions reading keys file or with symmetric authentication digest output. Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

ntp: upgrade 4.2.8p15 -> 4.2.8p16

2023-06-05T16:29:35+00:00

0001-libntp-Do-not-use-PTHREAD_STACK_MIN-on-glibc.patch 0001-test-Fix-build-with-new-compiler-defaults-to-fno-com.patch refreshed for new version. Changelog ========= - fixes 4 vulnerabilities (3 LOW and 1 None severity), - fixes 46 bugs - includes 15 general improvements - adds support for OpenSSL-3.0 Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

ntp: whitelist CVE-2019-11331

2023-04-19T16:39:15+00:00

Links from https://nvd.nist.gov/vuln/detail/CVE-2019-11331 lead to conclusion that this is how icurrent ntp protocol is designed. New RFC is propsed for future but it will not be compatible with current one. See https://support.f5.com/csp/article/K09940637 Signed-off-by: Peter Marko Signed-off-by: Khem Raj