summaryrefslogtreecommitdiff
path: root/package/ntp
AgeCommit message (Collapse)Author
2017-02-07ntp: security bump to verserion 4.2.8p9Adam Duskett
This version of ntp fixes several vulnerabilities. CVE-2016-9311 CVE-2016-9310 CVE-2016-7427 CVE-2016-7428 CVE-2016-9312 CVE-2016-7431 CVE-2016-7434 CVE-2016-7429 CVE-2016-7426 CVE-2016-7433 http://www.kb.cert.org/vuls/id/633847 In addition, libssl_compat.h is now included in many files, which references openssl/evp.h, openssl/dsa.h, and openssl/rsa.h. Even if a you pass --disable-ssl as a configuration option, these files are now required. As such, I have also added openssl as a dependency, and it is now automatically selected when you select ntp. Signed-off-by: Adam Duskett <aduskett@codeblue.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-11-28ntp: fix missing optional dependenciesJérôme Pouiller
ntpq and ntpdc may depends on libedit and libcap. $ arm-linux-readelf -d ./usr/bin/ntpdc | grep NEEDED 0x00000001 (NEEDED) Shared library: [libcap.so.2] 0x00000001 (NEEDED) Shared library: [libm.so.6] 0x00000001 (NEEDED) Shared library: [libedit.so.0] 0x00000001 (NEEDED) Shared library: [libncursesw.so.6] 0x00000001 (NEEDED) Shared library: [libssl.so.1.0.0] 0x00000001 (NEEDED) Shared library: [libcrypto.so.1.0.0] 0x00000001 (NEEDED) Shared library: [libpthread.so.0] 0x00000001 (NEEDED) Shared library: [libc.so.6] However, build order with these libraries is not defined. In order to keep things simple, we enforce build order even if ntpq/ntpdc are not selected. Signed-off-by: Jérôme Pouiller <jezz@sysmic.org> [Thomas: use --without-lineeditlibs.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-08-07ntp: disable debuggingVicente Bergas
When running ntp it randomly aborts at ntp-4.2.8p8/libntp/recvbuff.c:326 which seems to be a debugging feature. This patch just disables debugging, it does not fix the root cause of the problem. Signed-off-by: Vicente Bergas <vicencb@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-07-15ntp: add support for SHM clocksYugendra Sai Babu Nadupuru
In order for gpsd to work with the new version of ntpd, an enable option must be added to the configure step of ntp that allows for support of SHM clocks to be attached through shared memory. Signed-off-by: Yugendra Sai Babu Nadupuru <yugendra.sai.babu.nadupuru@rockwellcollins.com> Signed-off-by: Matt Weber <matthew.weber@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-06-03ntp: security bump to version 4.2.8p8Gustavo Zacarias
Fixes: CVE-2016-4957 - Crypto-NAK crash CVE-2016-4953 - Bad authentication demobilizes ephemeral associations CVE-2016-4954 - Processing spoofed server packets CVE-2016-4955 - Autokey association reset CVE-2016-4956 - Broadcast interleave Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-05-02ntp: security bump to version 4.2.8p7Gustavo Zacarias
Fixes: CVE-2016-1551 - Refclock impersonation vulnerability, AKA: refclock-peering CVE-2016-1549 - Sybil vulnerability: ephemeral association attack, AKA: ntp-sybil - MITIGATION ONLY CVE-2016-2516 - Duplicate IPs on unconfig directives will cause an assertion botch CVE-2016-2517 - Remote configuration trustedkey/requestkey values are not properly validated CVE-2016-2518 - Crafted addpeer with hmode > 7 causes array wraparound with MATCH_ASSOC CVE-2016-2519 - ctl_getitem() return value not always checked CVE-2016-1547 - Validate crypto-NAKs, AKA: nak-dos CVE-2016-1548 - Interleave-pivot - MITIGATION ONLY CVE-2015-7704 - KoD fix: peer associations were broken by the fix for NtpBug2901, AKA: Symmetric active/passive mode is broken CVE-2015-8138 - Zero Origin Timestamp Bypass, AKA: Additional KoD Checks CVE-2016-1550 - Improve NTP security against buffer comparison timing attacks, authdecrypt-timing, AKA: authdecrypt-timing Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-01-20ntp: security bump to version 4.2.8p6Gustavo Zacarias
CVE-2015-7973 - Deja Vu: Replay attack on authenticated broadcast mode CVE-2015-7974 - Skeleton Key: Missing key check allows impersonation between authenticated peers CVE-2015-7975 - nextvar() missing length check CVE-2015-7976 - ntpq saveconfig command allows dangerous characters in filenames CVE-2015-7977 - reslist NULL pointer dereference CVE-2015-7978 - Stack exhaustion in recursive traversal of restriction list CVE-2015-7979 - Off-path Denial of Service (DoS) attack on authenticated broadcast mode CVE-2015-8137 - origin: Zero Origin Timestamp Bypass CVE-2015-8158 - Potential Infinite Loop in ntpq Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-01-08ntp: security bump to version 4.2.8p5Gustavo Zacarias
Fixes: CVE-2015-5300 - MITM attacker can force ntpd to make a step larger than the panic threshold. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-10-22ntp: bump to version 4.2.8p4James Knight
Signed-off-by: James Knight <james.knight@rockwellcollins.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-10-20ntp: add ntptime optionJames Knight
Allow the `ntptime` utility to be included on a target. [Peter: add comment why AUTORECONF is needed] Signed-off-by: James Knight <james.knight@rockwellcollins.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-10-04package: Replace 'echo -n' by 'printf'Maxime Hadjinlian
'echo -n' is not a POSIX construct (no flag support), we shoud use 'printf', especially in init script. This patch was generated by the following command line: git grep -l 'echo -n' -- `git ls-files | grep -v 'patch'` | xargs sed -i 's/echo -n/printf/' Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-07-13package/ntp: increase pool server count in default configGergely Imreh
To protect agains 1 falsticker NTP server, the client needs to connect to at least 4 servers. Source: http://support.ntp.org/bin/view/Support/SelectingOffsiteNTPServers 5.3.3. Upstream Time Server Quantity Signed-off-by: Gergely Imreh <imrehg@gmail.com> Acked-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-07-06ntp: drop unused POST_PATCH_HOOKS handlingPeter Korsgaard
Now that NTP_PATCH_FIXUPS is gone. Reported-by: Danomi Manchego <danomimanchego123@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-07-06ntpd: drop unneeded uClibc workaround for refclock_pcf.cPeter Korsgaard
refclock_pcf.c contains code using the tm_gmtoff member of struct tm, which is only available on uClibc if it is built with __UCLIBC_HAS_TM_EXTENSIONS__. This change date back to: commit 7129da009cc72575a84a30c4587bd99f745c49d4 Author: Eric Andersen <andersen@codepoet.org> Date: Sat Jan 18 21:27:22 2003 +0000 Merge a bunch of stuff over from the tuxscreen buildroot, with many updates to make things be more consistant. -Erik But nowadays our uClibc configs DO enable __UCLIBC_HAS_TM_EXTENSIONS__, so it is no longer needed and can be dropped. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-07-06ntp: drop uselss patch fixup which sometimes breaks rebuildDanomi Manchego
Drop sed line which no longer changes anything as upstream has changed to use strrchr. Worse, it bumps each ntpd/*.c file's modification time, which sometimes triggers a strange dependency path causing the makefile to attempt to run the ntpd keyword-gen app, which fails, because it's been cross-compiled. Signed-off-by: Danomi Manchego <danomimanchego123@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-07-02ntp: security bump to version 4.2.8p3Gustavo Zacarias
Fixes: CVE-2015-5146 - ntpd control message crash: Crafted NUL-byte in configuration directive. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-05-19ntp: install after busyboxBaruch Siach
Make sure that ntp installs after busybox so that it overrides the busybox provided ntpd applet. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-04-22packages: remove non-IPv6 dependencies and tweaksGustavo Zacarias
Now that IPv6 is mandatory remove package dependencies and conditionals for it. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-04-07ntp: security bump to version 4.2.8p2Gustavo Zacarias
Fixes: CVE-2015-1798 - ntpd accepts unauthenticated packets with symmetric key crypto. CVE-2015-1799 - Authentication doesn't protect symmetric associations against DoS attacks. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-03-31packages: indentation cleanupJerzy Grzegorek
This commit doesn't touch infra packages. Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-03-20ntp: move systemd service file to /usr/libMike Williams
Signed-off-by: Mike Williams <mike@mikebwilliams.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-02-12ntp: rebase nano patch to apply cleanlyDanomi Manchego
Signed-off-by: Danomi Manchego <danomimanchego123@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-02-11ntp: security bump to version 4.2.8p1Baruch Siach
Fixes: CVE-2014-9297 - vallen is not validated in several places in ntp_crypto.c, leading to a potential information leak or possibly a crash CVE-2014-9298 - ::1 can be spoofed on some OSes (including "some versions" of Linux), so ACLs based on IPv6 ::1 addresses can be bypassed Drop a patch applied upstream, along with its accompanied AUTORECONF. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-12-31ntp: fix hash fileFabio Porcedda
Add a space between the hash and filename so the hash can be used. Signed-off-by: Fabio Porcedda <fabio.porcedda@gmail.com> Cc: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-12-26package/ntp: fix installationYann E. MORIN
Since 5d5c9a8 (ntp: security bump to version 4.2.8), scripts/ntp-wait and scripts/ntptrace are no longer scripts themselves, but directories containing those scripts. Fixes: http://autobuild.buildroot.org/results/518/5189e84004bf28b891da3ee07fecc8717b4e8e8c/ (ntp-wait) http://autobuild.buildroot.org/results/005/0056192a06d44814a0279637c4bcbf602936e7ff/ (ntptrace) http://autobuild.buildroot.org/results/8f3/8f372acf73743edf8027cda6865ba1aa7b6413a3/ (both) ... Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Cc: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-12-24package: indentation cleanupJerzy Grzegorek
Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-12-23ntp: adjust initscriptGustavo Zacarias
Use proper status messages, make spacing standard instead of a mix of spacing/tabbing, drop boringly obvious comment from the header. Also make reload = restart since ntpd doesn't handle reloading resulting in the old reload being 'stop'. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-12-23ntp: update sample configGustavo Zacarias
Drop redundant IP version and double default restrict. Tweak KoD and other defaults for properness. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-12-23ntp: security bump to version 4.2.8Gustavo Zacarias
Fixes: CVE-2014-9293 - ntpd generated a weak key for its internal use, with full administrative privileges. Attackers could use this key to reconfigure ntpd (or to exploit other vulnerabilities). CVE-2014-9294 - The ntp-keygen utility generated weak MD5 keys with insufficient entropy. CVE-2014-9295 - ntpd had several buffer overflows (both on the stack and in the data section), allowing remote authenticated attackers to crash ntpd or potentially execute arbitrary code. CVE-2014-9296 - The general packet processing function in ntpd did not handle an error case correctly. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-10-19ntp: Adding pps support to ntpdBryan Brinsko
Added an option for the ntpd application to support pps inputs. Signed-off-by: Bryan Brinsko <bryan.brinsko@rockwellcollins.com> Signed-off-by: Matt Weber <matthew.weber@rockwellcollins.com> Acked-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-10-04packages: rename FOO_CONF_OPT into FOO_CONF_OPTSThomas De Schampheleire
To be consistent with the recent change of FOO_MAKE_OPT into FOO_MAKE_OPTS, make the same change for FOO_CONF_OPT. Sed command used: find * -type f | xargs sed -i 's#_CONF_OPT\>#&S#g' Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-08-21ntp: fix undefined variable in error printDanomi Manchego
The variable "$SCRIPTNAME" is undefined; replace with "$0". Signed-off-by: Danomi Manchego <danomimanchego123@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-07-18ntp: rename patches to follow BR guidelinesDanomi Manchego
Signed-off-by: Danomi Manchego <danomimanchego123@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-07-17ntp: properly select/filter netsnmp for ntpsnmpdGustavo Zacarias
BR2_PACKAGE_NTP_SNMPD was pushing netsnmp into dependencies but was never selected, and since netsnmp requires fork it wasn't filtered out for nommu. Fixes: http://autobuild.buildroot.net/results/776/7769afe0da09e3f4f96d9a0f4c0febb0c72cc34f/ Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-07-09ntpd: drop default /etc/default/ntpd filePeter Korsgaard
With the recent change to the init script the default /etc/default/ntpd file doesn't do anything, so don't install it. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-07-09Fixing ntpd time syncing problemAngelo Compagnucci
Add ntp.conf file to make ntpd syncing. Starting ntpd daemon with -g to sync time also with big offsets. Removes the use of deprecated ntpdate command for initial time sync. [Peter: drop unused NTPDATE_BIN variable] Signed-off-by: Angelo Compagnucci <angelo.compagnucci@gmail.com> Acked-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Tested-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-06-08packages: replace command install by $(INSTALL)Maxime Hadjinlian
Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Acked-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-03-07ntp: add systemd unit file for ntpdIvan Sergeev
Signed-off-by: Ivan Sergeev <vsergeev@kumunetworks.com> Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2013-12-19package: add <pkg>_VERSION_MAJOR variableJerzy Grzegorek
Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Reviewed-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2013-12-06packages: remove uninstall commandsThomas De Schampheleire
Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2013-06-06Normalize separator size to 80Alexandre Belloni
Signed-off-by: Alexandre Belloni <alexandre.belloni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2012-11-08ntp: add license informationMark Jackson
Signed-off-by: Mark Jackson <mpfj@newflow.co.uk> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2012-11-03perl: prepare the removal of microperlFrancois Perrad
Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2012-07-17all packages: rename XXXTARGETS to xxx-packageArnout Vandecappelle (Essensium/Mind)
Also remove the redundant $(call ...). This is a purely mechanical change, performed with find package linux toolchain boot -name \*.mk | \ xargs sed -i -e 's/$(eval $(call GENTARGETS))/$(eval $(generic-package))/' \ -e 's/$(eval $(call AUTOTARGETS))/$(eval $(autotools-package))/' \ -e 's/$(eval $(call CMAKETARGETS))/$(eval $(cmake-package))/' Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2012-01-26ntp: bump to version 4.2.6p5Gustavo Zacarias
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-10-17ntp: bump to version 4.2.6p4 and enhanceGustavo Zacarias
* Bump to version 4.2.6p4 * Add new ntpsnmpd option * Fix style Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-09-29package: remove useless arguments from AUTOTARGETSThomas Petazzoni
Thanks to the pkgparentdir and pkgname functions, we can rewrite the AUTOTARGETS macro in a way that avoids the need for each package to repeat its name and the directory in which it is present. [Peter: pkgdir->pkgparentdir] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-02-04ntp: only install init script if ntpd is enabledPeter Korsgaard
Further more: - Rename to S49ntp to match other packages - Fix start target to run ntpd, and only try ntpdate if available Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-02-04ntp: add ntpdate optionGustavo Zacarias
Closes #2935 Add ntpdate option and make ntpd optional. Based on incomplete patch by Frederik Pasch <fpasch@googlemail.com> Also enable crypto when openssl is enabled. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-01-30ntp: bump to version 4.2.6p3 and fix glibc build failureGustavo Zacarias
Bump to version 4.2.6p3 and fix a build failure with external toolchains that use certain glibc versions as point out by speakman on IRC. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Acked-by: Daniel Nyström <daniel.nystrom@timeterminal.se> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
generated by cgit v1.2.3 (git 2.39.1) at 2024-09-26 03:58:10 +0000