diff options
| author | Gustavo Zacarias <gustavo@zacarias.com.ar> | 2015-04-07 13:54:11 -0300 |
|---|---|---|
| committer | Thomas Petazzoni <thomas.petazzoni@free-electrons.com> | 2015-04-07 21:35:15 +0200 |
| commit | c765a7faa56acb7b020bd78e697ee334442341db (patch) | |
| tree | 0e73bd34353ad1e00cba344d8441feb56d6f7b2d | |
| parent | 6bf9e23332bffc6362cb63f37957ac69e5a6ac96 (diff) | |
| download | buildroot-c765a7faa56acb7b020bd78e697ee334442341db.tar.gz buildroot-c765a7faa56acb7b020bd78e697ee334442341db.zip | |
ntp: security bump to version 4.2.8p2
Fixes:
CVE-2015-1798 - ntpd accepts unauthenticated packets with symmetric key
crypto.
CVE-2015-1799 - Authentication doesn't protect symmetric associations
against DoS attacks.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
| -rw-r--r-- | package/ntp/ntp.hash | 4 | ||||
| -rw-r--r-- | package/ntp/ntp.mk | 2 |
2 files changed, 3 insertions, 3 deletions
diff --git a/package/ntp/ntp.hash b/package/ntp/ntp.hash index 8336be8dc2..fe5193202f 100644 --- a/package/ntp/ntp.hash +++ b/package/ntp/ntp.hash @@ -1,2 +1,2 @@ -# From http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2/ntp-4.2.8p1.tar.gz.md5 -md5 65d8cdfae4722226fbe29863477641ed ntp-4.2.8p1.tar.gz +# From http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2/ntp-4.2.8p2.tar.gz.md5 +md5 fa37049383316322d060ec9061ac23a9 ntp-4.2.8p2.tar.gz diff --git a/package/ntp/ntp.mk b/package/ntp/ntp.mk index bf2cdbd92f..c91cc7024c 100644 --- a/package/ntp/ntp.mk +++ b/package/ntp/ntp.mk @@ -5,7 +5,7 @@ ################################################################################ NTP_VERSION_MAJOR = 4.2 -NTP_VERSION = $(NTP_VERSION_MAJOR).8p1 +NTP_VERSION = $(NTP_VERSION_MAJOR).8p2 NTP_SITE = http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-$(NTP_VERSION_MAJOR) NTP_DEPENDENCIES = host-pkgconf libevent NTP_LICENSE = ntp license |
