diff options
| author | Gustavo Zacarias <gustavo@zacarias.com.ar> | 2014-12-22 11:26:59 -0300 |
|---|---|---|
| committer | Thomas Petazzoni <thomas.petazzoni@free-electrons.com> | 2014-12-23 11:36:07 +0100 |
| commit | 5d5c9a8dcb1f3385e70a2e089f6577c67eca59c3 (patch) | |
| tree | 9951c95608747cc60c4d95a9c7e84b93e082303e /package/ntp/ntp-002-nano.patch | |
| parent | 02b1975b787fa01c1115eca34adf309ac0830ada (diff) | |
| download | buildroot-5d5c9a8dcb1f3385e70a2e089f6577c67eca59c3.tar.gz buildroot-5d5c9a8dcb1f3385e70a2e089f6577c67eca59c3.zip | |
ntp: security bump to version 4.2.8
Fixes:
CVE-2014-9293 - ntpd generated a weak key for its internal use, with
full administrative privileges. Attackers could use this key to
reconfigure ntpd (or to exploit other vulnerabilities).
CVE-2014-9294 - The ntp-keygen utility generated weak MD5 keys with
insufficient entropy.
CVE-2014-9295 - ntpd had several buffer overflows (both on the stack and
in the data section), allowing remote authenticated attackers to crash
ntpd or potentially execute arbitrary code.
CVE-2014-9296 - The general packet processing function in ntpd did not
handle an error case correctly.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Diffstat (limited to 'package/ntp/ntp-002-nano.patch')
| -rw-r--r-- | package/ntp/ntp-002-nano.patch | 23 |
1 files changed, 0 insertions, 23 deletions
diff --git a/package/ntp/ntp-002-nano.patch b/package/ntp/ntp-002-nano.patch deleted file mode 100644 index d16046cb03..0000000000 --- a/package/ntp/ntp-002-nano.patch +++ /dev/null @@ -1,23 +0,0 @@ -Fixes issues with glibc header files, see -http://bugs.gentoo.org/show_bug.cgi?id=270483 - -Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> - -diff -Nura ntp-4.2.6p2.orig/include/ntp_syscall.h ntp-4.2.6p2/include/ntp_syscall.h ---- ntp-4.2.6p2.orig/include/ntp_syscall.h 2009-12-09 04:36:37.000000000 -0300 -+++ ntp-4.2.6p2/include/ntp_syscall.h 2011-01-27 13:09:05.072336628 -0300 -@@ -14,6 +14,14 @@ - # include <sys/timex.h> - #endif - -+#if defined(ADJ_NANO) && !defined(MOD_NANO) -+#define MOD_NANO ADJ_NANO -+#endif -+ -+#if defined(ADJ_TAI) && !defined(MOD_TAI) -+#define MOD_TAI ADJ_TAI -+#endif -+ - #ifndef NTP_SYSCALLS_LIBC - #ifdef NTP_SYSCALLS_STD - # define ntp_adjtime(t) syscall(SYS_ntp_adjtime, (t)) |
