buildroot/package/ntp, branch 2016.08

ntp: disable debugging

2016-08-07T20:57:40+00:00

When running ntp it randomly aborts at ntp-4.2.8p8/libntp/recvbuff.c:326 which seems to be a debugging feature. This patch just disables debugging, it does not fix the root cause of the problem. Signed-off-by: Vicente Bergas Signed-off-by: Thomas Petazzoni

ntp: add support for SHM clocks

2016-07-15T11:11:06+00:00

In order for gpsd to work with the new version of ntpd, an enable option must be added to the configure step of ntp that allows for support of SHM clocks to be attached through shared memory. Signed-off-by: Yugendra Sai Babu Nadupuru Signed-off-by: Matt Weber Signed-off-by: Thomas Petazzoni

ntp: security bump to version 4.2.8p8

2016-06-03T07:45:40+00:00

Fixes: CVE-2016-4957 - Crypto-NAK crash CVE-2016-4953 - Bad authentication demobilizes ephemeral associations CVE-2016-4954 - Processing spoofed server packets CVE-2016-4955 - Autokey association reset CVE-2016-4956 - Broadcast interleave Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

ntp: security bump to version 4.2.8p7

2016-05-02T15:24:10+00:00

Fixes: CVE-2016-1551 - Refclock impersonation vulnerability, AKA: refclock-peering CVE-2016-1549 - Sybil vulnerability: ephemeral association attack, AKA: ntp-sybil - MITIGATION ONLY CVE-2016-2516 - Duplicate IPs on unconfig directives will cause an assertion botch CVE-2016-2517 - Remote configuration trustedkey/requestkey values are not properly validated CVE-2016-2518 - Crafted addpeer with hmode > 7 causes array wraparound with MATCH_ASSOC CVE-2016-2519 - ctl_getitem() return value not always checked CVE-2016-1547 - Validate crypto-NAKs, AKA: nak-dos CVE-2016-1548 - Interleave-pivot - MITIGATION ONLY CVE-2015-7704 - KoD fix: peer associations were broken by the fix for NtpBug2901, AKA: Symmetric active/passive mode is broken CVE-2015-8138 - Zero Origin Timestamp Bypass, AKA: Additional KoD Checks CVE-2016-1550 - Improve NTP security against buffer comparison timing attacks, authdecrypt-timing, AKA: authdecrypt-timing Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

ntp: security bump to version 4.2.8p6

2016-01-20T14:44:17+00:00

CVE-2015-7973 - Deja Vu: Replay attack on authenticated broadcast mode CVE-2015-7974 - Skeleton Key: Missing key check allows impersonation between authenticated peers CVE-2015-7975 - nextvar() missing length check CVE-2015-7976 - ntpq saveconfig command allows dangerous characters in filenames CVE-2015-7977 - reslist NULL pointer dereference CVE-2015-7978 - Stack exhaustion in recursive traversal of restriction list CVE-2015-7979 - Off-path Denial of Service (DoS) attack on authenticated broadcast mode CVE-2015-8137 - origin: Zero Origin Timestamp Bypass CVE-2015-8158 - Potential Infinite Loop in ntpq Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

ntp: security bump to version 4.2.8p5

2016-01-08T17:31:04+00:00

Fixes: CVE-2015-5300 - MITM attacker can force ntpd to make a step larger than the panic threshold. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

ntp: bump to version 4.2.8p4

2015-10-22T21:44:18+00:00

Signed-off-by: James Knight Signed-off-by: Peter Korsgaard

ntp: add ntptime option

2015-10-19T22:19:36+00:00

Allow the `ntptime` utility to be included on a target. [Peter: add comment why AUTORECONF is needed] Signed-off-by: James Knight Signed-off-by: Peter Korsgaard

package: Replace 'echo -n' by 'printf'

2015-10-03T22:56:41+00:00

'echo -n' is not a POSIX construct (no flag support), we shoud use 'printf', especially in init script. This patch was generated by the following command line: git grep -l 'echo -n' -- `git ls-files | grep -v 'patch'` | xargs sed -i 's/echo -n/printf/' Signed-off-by: Maxime Hadjinlian Reviewed-by: Arnout Vandecappelle (Essensium/Mind) Signed-off-by: Peter Korsgaard

package/ntp: increase pool server count in default config

2015-07-13T16:44:45+00:00

To protect agains 1 falsticker NTP server, the client needs to connect to at least 4 servers. Source: http://support.ntp.org/bin/view/Support/SelectingOffsiteNTPServers 5.3.3. Upstream Time Server Quantity Signed-off-by: Gergely Imreh Acked-by: "Yann E. MORIN" Signed-off-by: Thomas Petazzoni