File ntp.changes of Package ntp
------------------------------------------------------------------- Wed Feb 5 15:20:57 UTC 2025 - Reinhard Max <[email protected]> - Update to 4.2.8p18 * obsoletes Get-rid-of-EVP_MD_CTX_FLAG_NON_FIPS_ALLOW.patch * Multiple bug fixes and improvements. For details, see: /usr/share/doc/packages/ntp/ChangeLog http://www.ntp.org/support/securitynotice/4_2_8-series-changelog/ - bsc#1233890: chown refclock device to ntp user on startup. - ntp-check-argv.patch: Improve the handling of the process name of the forked-off DNS resolver process. ------------------------------------------------------------------- Fri May 24 13:38:02 UTC 2024 - Thorsten Kukuk <[email protected]> - Drop initscripts-legacy support [jsc#PED264] - Drop rc<service> symlinks [jsc#PED-264], [jsc#PED-266] ------------------------------------------------------------------- Wed Apr 24 08:09:08 UTC 2024 - Marcus Meissner <[email protected]> - Get-rid-of-EVP_MD_CTX_FLAG_NON_FIPS_ALLOW.patch: Allow certain usages of MD5 in FIPS mode. (bsc#1222865) ------------------------------------------------------------------- Thu Feb 22 14:01:27 UTC 2024 - Dominique Leuenberger <[email protected]> - Use %patch -P N instead of deprecated %patchN. ------------------------------------------------------------------- Wed Jun 7 09:12:40 UTC 2023 - Reinhard Max <[email protected]> - Update to 4.2.8p17: * Fix some regressions of 4.2.8p16 - Update to 4.2.8p16: * [Sec 3808] Assertion failure in ntpq on malformed RT-11 date * [Sec 3807], bsc#1210390, CVE-2023-26555: praecis_parse() in the Palisade refclock driver has a hypothetical input buffer overflow. * [Sec 3767] An OOB KoD RATE value triggers an assertion when debug is enabled. * Obsoletes: ntp-CVE-2023-26551.patch, ntp-sntp-dst.patch, ntp-ENOBUFS.patch * Multiple bug fixes and improvements. For details, see: /usr/share/doc/packages/ntp/ChangeLog http://www.ntp.org/support/securitynotice/4_2_8-series-changelog/ - Follow upstream's suggestion to build with debugging disabled: https://www.ntp.org/support/securitynotice/ntpbug3767/ ------------------------------------------------------------------- Fri May 5 13:55:24 UTC 2023 - Reinhard Max <[email protected]> - bsc#1210386: out-of-bounds writes in mstolfp() * CVE-2023-26551, CVE-2023-26552, CVE-2023-26553, CVE-2023-26554 * Add ntp-CVE-2023-26551.patch ------------------------------------------------------------------- Tue Feb 7 15:00:43 UTC 2023 - Reinhard Max <[email protected]> - bsc#1208004: Make %post script SELinux aware ------------------------------------------------------------------- Sat Jan 28 22:38:45 UTC 2023 - Dirk Müller <[email protected]> - run bash specific post with bash ------------------------------------------------------------------- Thu Jan 26 16:43:42 UTC 2023 - Reinhard Max <[email protected]> - boo#1207577: set /var/lib/ntp/var/run/ntp to 775 ------------------------------------------------------------------- Wed Feb 24 02:09:55 UTC 2022 - Jonathan Kang <[email protected]> - Modified ntp.NetworkManager: Update ntp servers on dhcp4-change and dhcp6-change, instead of up condition. This is because ntp options are available during dhcp renewed or rebound, and not available when the interface has been activated (bsc#1171547). ------------------------------------------------------------------- Tue Oct 12 06:09:33 UTC 2021 - Johannes Segitz <[email protected]> - Added hardening to systemd service(s) (bsc#1181400). Modified: * conf.ntp-wait.service * conf.ntpd.service ------------------------------------------------------------------- Tue Jun 15 14:47:45 UTC 2021 - Reinhard Max <[email protected]> - bsc#1186431: Fix a typo in %post . ------------------------------------------------------------------- Thu May 20 11:01:49 UTC 2021 - Reinhard Max <[email protected]> - jsc#SLE-15482, ntp-clarify-interface.patch: Adjust the documentation to clarify that "interface ignore all" does not cover the wildcard and localhost addresses. ------------------------------------------------------------------- Thu Apr 1 16:18:52 UTC 2021 - Yaroslav Kurlaev <[email protected]> - Change PIDFile path in the systemd unit file from /var/run /run to remove a warning from systemd. ------------------------------------------------------------------- Fri Feb 12 09:19:47 UTC 2021 - Reinhard Max <[email protected]> - Disown /var/lib/ntp, it is now part of the sysuser-ntp package. ------------------------------------------------------------------- Mon Feb 8 12:50:47 UTC 2021 - Reinhard Max <[email protected]> - bsc#1181788: Make the code for the service name change robust to the simplified systemd-sysv-convert script. - Fix systemd dependencies. ------------------------------------------------------------------- Fri Jan 8 21:36:45 UTC 2021 - Martin Hauke <[email protected]> - Package statsdir /var/log/ntpstats/ - Let system-user-ntp handle the user/group generation - Introduce subpackage dcf77-tools * testdcf, a simple DCF77 raw impulse test program * dcfd, a simple DCF77 raw impulse receiver - Add patch testdcf-gude.diff * Improves testdcf's compatibility with GUDE DCF77 receivers ------------------------------------------------------------------- Tue Oct 13 09:59:28 UTC 2020 - Jan Engelhardt <[email protected]> - Replace old specfile constructs. Do not suppress errors from useradd. ------------------------------------------------------------------- Thu Jun 25 13:56:55 UTC 2020 - Reinhard Max <[email protected]> - Update to 4.2.8p15 - Fixed security issues: * bsc#1169740, CVE-2020-11868: DoS on client ntpd using server mode packet * bsc#1171355, CVE-2018-8956: remote attackers may prevent a broadcast client from synchronizing its clock with a broadcast NTP server via spoofed mode 3 and mode 5 packets. * bsc#1172651, CVE-2020-13817: vulnerable to off-path attack * bsc#1173334, CVE-2020-15025: Remote DoS when CMAC key is used - Bugfixes in 4.2.8p15 and 4.2.8p14 include: * [Bug 3667] decodenetnum fails with numeric port * [Bug 3666] avoid unlimited receive buffer allocation * [Bug 3660] Manycast orphan mode startup discovery problem. * [Bug 3655] ntpdc memstats hash counts * [Bug 3653] Refclock jitter RMS calculation * [Bug 3646] Avoid sync with unsync orphan * [Bug 3644] Unsynchronized server [...] selected as candidate * [Bug 3636] NMEA: combine time/date from multiple sentences * [Bug 3635] Make leapsecond file hash check optional * [Bug 3628] raw DCF decoding - improve robustness * [Bug 3620] memory leak in ntpq sysinfo * [Bug 3619] Honour drefid setting in cooked mode and sysinfo * [Bug 3617] Add support for ACE III and Copernicus II receivers * [Bug 3615] accelerate refclock startup * [Bug 3613] Propagate noselect to mobilized pool servers * [Bug 3612] Use-of-uninitialized-value in receive function * [Bug 3611] NMEA time interpreted incorrectly * [Bug 3609] Fixing wrong falseticker in case of non-statistic jitter * [Bug 3604] Wrong param byte order passing into record_raw_stats() in ntp_io.c * [Bug 3594] ntpd discards messages coming through nmead * [Bug 3593] ntpd discards silently nmea messages after the 5th string * [Bug 3590] Update refclock_oncore.c to the new GPS date API * [Bug 3583] synchronization error - set clock to base date if system time is before that limit * [Bug 3582] gpsdjson refclock fudgetime1 adjustment is doubled * [Bug 3580] Possible bug ntpq-subs (NULL dereference in dogetassoc) * [Bug 3577] Update refclock_zyfer.c to the new GPS date API * [Bug 3576] New GPS date function API * [Bug 3573] nptdate: missleading error message * [Bug 3569] cleanup MOD_NANO/STA_NANO handling for 'ntpadjtimex()' * [Bug 3550] Reproducible build: Respect SOURCE_DATE_EPOCH * [Bug 3542] ntpdc monlist parameters cannot be set * [Bug 3533] ntpdc peer_info ipv6 issues * [Bug 3531] make check: test-decodenetnum fails * [Bug 3515] Refactor ntpdmain() dispatcher loop and group common code * [Bug 3491] Signed values of LFP datatypes should always display a sign * [Bug 3490] Patch to support Trimble Resolution Receivers * [Bug 3473] RefID of refclocks should always be text format * [Bug 3094] ntpd trying to listen for broadcasts on a completely ipv6 network * [Bug 2420] ntpd doesn't run and exits with retval 0 when invalid user is specified with -u * [Bug 1433] runtime check whether the kernel really supports capabilities * Provide more detail on unrecognized config file parser tokens. * Startup log improvements. - Obsoleted patches: * ntp-4.2.6p2-ntpq-speedup-782060.patch * ntp-daemonize.patch * ntp-reproducible.patch - Silence an OpenSSL version warning (bsc#992038,bsc#1125401 ntp-openssl-version.patch). ------------------------------------------------------------------- Wed Jun 17 08:26:47 UTC 2020 - Dominique Leuenberger <[email protected]> - Properly use %{_libexecdir} to package the legacy initscript action scripts. ------------------------------------------------------------------- Tue Jan 28 15:25:58 UTC 2020 - Thorsten Kukuk <[email protected]> - Remove not used Pre/Post requires ------------------------------------------------------------------- Wed Jul 24 13:13:56 UTC 2019 - [email protected] - removal of ntp.firewall, since SuSEfirewall2 has been replaced by firewalld, see [1]. [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html ------------------------------------------------------------------- Fri Jul 12 11:09:37 UTC 2019 - Martin Liška <[email protected]> - Update ntp-4.2.6p2-seed_file.patch in order to not return 0 from in a void function. - Use %make_build in order to provide verbose output. ------------------------------------------------------------------- Thu Jun 6 09:29:34 UTC 2019 - Tomáš Chvátal <[email protected]> - Drop the omc config ntp.xml fate#301838: * it is obsolete since SLE11 ------------------------------------------------------------------- Wed Apr 17 11:19:18 CEST 2019 - [email protected] - Don't source /etc/rc.status if we don't use it. ------------------------------------------------------------------- Mon Mar 11 10:01:27 UTC 2019 - Reinhard Max <[email protected]> - Update ro 4.2.8p13 * CVE-2019-8936, bsc#1128525: Crafted null dereference attack in authenticated mode 6 packet. * Fix several bugs in the BANCOMM reclock driver. * Fix ntp_loopfilter.c snprintf compilation warnings. * Fix spurious initgroups() error message. * Fix STA_NANO struct timex units. * Fix GPS week rollover in libparse. * Fix incorrect poll interval in packet. * Add a missing check for ENABLE_CMAC. ------------------------------------------------------------------- Thu Feb 21 18:19:40 UTC 2019 - Franck Bui <[email protected]> - Drop use of $FIRST_ARG in ntp.spec The use of $FIRST_ARG was probably required because of the %service_* rpm macros were playing tricks on the shell positional parameters. This is bad practice and error prones so let's assume that no macros should do that anymore and hence it's safe to assume that positional parameters remains unchanged after any rpm macro call. ------------------------------------------------------------------- Mon Dec 10 10:03:56 UTC 2018 - Franck Bui <[email protected]> - No more rely on /etc/insserv.conf for adding dependencies in ntpd.service against time-sync.target (boo#1118375) ------------------------------------------------------------------- Tue Sep 11 12:24:52 UTC 2018 - [email protected] - Update to 4.2.8p12 (bsc#1111853): * CVE-2018-12327, bsc#1098531: fixed stack buffer overflow in the openhost() command-line call of NTPQ/NTPDC. * Add further tweaks to improve the fix for CVE-2018-7170, bsc#1083424. * ntp-usrgrp-resolver.patch was integrated upstream. - Don't run autoreconf anymore and remove all related hacks and BuildRequires. ------------------------------------------------------------------- Tue Apr 24 10:19:39 UTC 2018 - [email protected] - Refactor the key handling in %post so that it does not overwrite user settings (bsc#1036505) and is more robust against ignored SIGPIPE (bsc#1090564). ------------------------------------------------------------------- Sun Mar 18 20:18:40 UTC 2018 - [email protected] - change example statsdir in ntp.conf to /var/log/ntpstats/ to match the AppArmor profile (boo#1076247) ------------------------------------------------------------------- Wed Feb 28 09:47:40 UTC 2018 - [email protected] - Update to 4.2.8p11 (bsc#1082210): * CVE-2016-1549: Sybil vulnerability: ephemeral association attack. While fixed in ntp-4.2.8p7, there are significant additional protections for this issue in 4.2.8p11. * CVE-2018-7182, bsc#1083426: ctl_getitem(): buffer read overrun leads to undefined behavior and information leak. * CVE-2018-7170, bsc#1083424: Multiple authenticated ephemeral associations. * CVE-2018-7184, bsc#1083422: Interleaved symmetric mode cannot recover from bad state. * CVE-2018-7185, bsc#1083420: Unauthenticated packet can reset authenticated interleaved association. * CVE-2018-7183, bsc#1083417: ntpq:decodearr() can write beyond its buffer limit. * Obsoletes these patches: ntp-sntp-a.patch, ntp-warnings.patch - Remove dead code from conf.start-ntpd (bsc#1082063). - Don't use libevent's cached time stamps in sntp. (bsc#1077445, ntp-sntp-libevent.patch) ------------------------------------------------------------------- Thu Dec 21 13:55:11 UTC 2017 - [email protected] - Add ntp-reproducible.patch to make build reproducible (boo#1047218) ------------------------------------------------------------------- Tue Dec 19 15:26:04 UTC 2017 - [email protected] - Restart nptd if failed or aborted (FATE#315133). - Do not try to set the HW clock when adding a server at runtime to avoid blocking systemd. ------------------------------------------------------------------- Thu Nov 23 13:47:08 UTC 2017 - [email protected] - Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468) ------------------------------------------------------------------- Thu Apr 6 13:55:57 UTC 2017 - [email protected] - Enable experimental leap smearing (fate#321003). See /usr/share/doc/packages/ntp/README.leapsmear for details. ------------------------------------------------------------------- Thu Apr 6 13:26:34 UTC 2017 - [email protected] - Fix spelling and default values in conf.sysconfig.ntp ------------------------------------------------------------------- Wed Mar 22 15:57:48 UTC 2017 - [email protected] - Update to 4.2.8p10 (bsc#1030050): * Sec 3389 / CVE-2017-6464 / VU#325339: NTP-01-016 NTP: Denial of Service via Malformed Config * Sec 3388 / CVE-2017-6462 / VU#325339: NTP-01-014 NTP: Buffer Overflow in DPTS Clock * Sec 3387 / CVE-2017-6463 / VU#325339: NTP-01-012 NTP: Authenticated DoS via Malicious Config Option * Sec 3386: NTP-01-011 NTP: ntpq_stripquotes() returns incorrect Value * Sec 3385: NTP-01-010 NTP: ereallocarray()/eallocarray() underused * Sec 3381: NTP-01-006 NTP: Copious amounts of Unused Code * Sec 3380: NTP-01-005 NTP: Off-by-one in Oncore GPS Receiver * Sec 3379 / CVE-2017-6458 / VU#325339: NTP-01-004 NTP: Potential Overflows in ctl_put() functions * Sec 3378 / CVE-2017-6451 / VU#325339: NTP-01-003 Improper use of snprintf() in mx4200_send() * Sec 3377 / CVE-2017-6460 / VU#325339: NTP-01-002 Buffer Overflow in ntpq when fetching reslist * Sec 3376: NTP-01-001 Makefile does not enforce Security Flags * Sec 3361 / CVE-2016-9042 / VU#325339: 0rigin (zero origin) DoS. * [Bug 3393] clang scan-build findings * [Bug 3363] Support for openssl-1.1.0 without compatibility modes * [Bug 3356] Bugfix 3072 breaks multicastclient * [Bug 3173] forking async worker: interrupted pipe I/O * [Bug 3139] (...) time_pps_create: Exec format error * [Bug 3107] Incorrect Logic for Peer Event Limiting * [Bug 3062] Change the process name of forked DNS worker * [Bug 2923] Trap Configuration Fail * [Bug 2896] Nothing happens if minsane < maxclock < minclock * [Bug 2851] allow -4/-6 on restrict line with mask * [Bug 2645] out-of-bound pointers in ctl_putsys and decode_bitflags - Removed patches: * ntp-openssl-version.patch: fixed upstream * ntp-processname.patch: accepted upstream * ntp-trap.patch: accepted upstream * ntp-unbreak-multicast.patch: fixed upstream - Remove spurious log messages (bsc#1014172, ntp-warnings.patch). ------------------------------------------------------------------- Fri Mar 10 08:38:18 UTC 2017 - [email protected] - Fix a problem with multicast clients. (bsc#1018940, ntp-unbreak-multicast.patch) ------------------------------------------------------------------- Tue Feb 21 11:08:46 CET 2017 - [email protected] - Move ntp-kod to /var/lib/ntp, because /var/db is not a standard directory and causes problems for transactional updates (ntp-move-kod-file.patch) ------------------------------------------------------------------- Tue Jan 17 11:22:21 UTC 2017 - [email protected] - Remove 50-ntp.list (bsc#1011919). - Use system-wide libevent instead of local copy. ------------------------------------------------------------------- Mon Nov 28 15:05:09 UTC 2016 - [email protected] - Simplify ntpd's search for its own executable to prevent AppArmor warnings (bsc#956365, ntp-pathfind.patch). ------------------------------------------------------------------- Mon Nov 21 16:14:17 UTC 2016 - [email protected] - Update to 4.2.8p9: * CVE-2016-9311: Trap crash. * CVE-2016-9310: Mode 6 unauthenticated trap information disclosure and DDoS vector. * CVE-2016-7427: Broadcast Mode Replay Prevention DoS. * CVE-2016-7428: Broadcast Mode Poll Interval Enforcement DoS. * CVE-2016-7431: Regression: 010-origin: Zero Origin Timestamp Bypass. * CVE-2016-7434: Null pointer dereference in _IO_str_init_static_internal(). * CVE-2016-7429: Interface selection attack. * CVE-2016-7426: Client rate limiting and server responses. * CVE-2016-7433: Reboot sync calculation problem. * Fix a spurious error message (obsoletes ntp-sigchld.patch). * Other bugfixes, see /usr/share/doc/packages/ntp/ChangeLog. - Fix a regression in "trap" (bsc#981252, ntp-trap.patch). - Reduce the number of netlink groups to listen on for changes to the local network setup (bsc#992606, ntp-netlink.patch). - Fix segfault in "sntp -a" (bnc#1009434, ntp-sntp-a.patch). - Silence an OpenSSL version warning (bsc#992038, ntp-openssl-version.patch). ------------------------------------------------------------------- Wed Oct 5 13:13:16 UTC 2016 - [email protected] - Depend on pps-tools-devel only for openSUSE > 13.2 ------------------------------------------------------------------- Thu Aug 25 07:22:49 UTC 2016 - [email protected] - Make the resolver task change user and group IDs to the same values as the main task. (bnc#988028, ntp-usrgrp-resolver.patch) ------------------------------------------------------------------- Tue Jun 7 07:42:00 UTC 2016 - [email protected] - Keep the parent process alive until the daemon has finished initialisation, to make sure that the PID file exists when the parent returns (ntp-daemonize.patch). - Update to 4.2.8p8 (bsc#982056): * CVE-2016-4953, bsc#982065: Bad authentication demobilizes ephemeral associations. * CVE-2016-4954, bsc#982066: Processing spoofed server packets. * CVE-2016-4955, bsc#982067: Autokey association reset. * CVE-2016-4956, bsc#982068: Broadcast interleave. * CVE-2016-4957, bsc#982064: CRYPTO_NAK crash. - Change the process name of the forking DNS worker process to avoid the impression that ntpd is started twice. (bsc#979302, ntp-processname.patch). - Don't ignore SIGCHILD because it breaks wait() (boo#981422, ntp-sigchld.patch). - ntp-wait does not accept fractional seconds, so use 1 instead of 0.2 in ntp-wait.service (boo#979981). - Separate the creation of ntp.keys and key #1 in it to avoid problems when upgrading installations that have the file, but no key #1, which is needed e.g. by "rcntp addserver". - Fix the TZ offset output of sntp during DST. (bsc#951559, ntp-sntp-dst.patch) - Add /var/db/ntp-kod (bsc#916617). - Add ntp-ENOBUFS.patch to limit a warning that might happen quite a lot on loaded systems (bsc#956773). - Don't wait for 11 minutes to restart ntpd when it has died (boo#894031). ------------------------------------------------------------------- Wed May 4 15:08:05 UTC 2016 - [email protected] - Update to 4.2.8p7 (bsc#977446): * CVE-2016-1547, bsc#977459: Validate crypto-NAKs, AKA: CRYPTO-NAK DoS. * CVE-2016-1548, bsc#977461: Interleave-pivot * CVE-2016-1549, bsc#977451: Sybil vulnerability: ephemeral association attack. * CVE-2016-1550, bsc#977464: Improve NTP security against buffer comparison timing attacks. * CVE-2016-1551, bsc#977450: Refclock impersonation vulnerability * CVE-2016-2516, bsc#977452: Duplicate IPs on unconfig directives will cause an assertion botch in ntpd. * CVE-2016-2517, bsc#977455: remote configuration trustedkey/ requestkey/controlkey values are not properly validated. * CVE-2016-2518, bsc#977457: Crafted addpeer with hmode > 7 causes array wraparound with MATCH_ASSOC. * CVE-2016-2519, bsc#977458: ctl_getitem() return value not always checked. * integrate ntp-fork.patch * Improve the fixes for: CVE-2015-7704, CVE-2015-7705, CVE-2015-7974 - Restrict the parser in the startup script to the first occurrance of "keys" and "controlkey" in ntp.conf (boo#957226). - Depend on pps-tools-devel to provide timepps.h header to enable Linux PPSAPI support to make GPS devices usefull. (boo#977563) ------------------------------------------------------------------- Fri Mar 11 11:06:17 UTC 2016 - [email protected] - CVE-2015-8158, bsc#962966: potential infinite loop in ntpq - CVE-2015-8138, bsc#963002: Zero Origin Timestamp Bypass - CVE-2015-7978, bsc#963000: Stack exhaustion in recursive traversal of restriction list. - CVE-2015-7979, bsc#962784: off-path denial of service on authenticated broadcast mode - CVE-2015-7977, bsc#962970: restriction list NULL pointer dereference - CVE-2015-7976, bsc#962802: 'ntpq saveconfig' command allows dangerous characters in filenames - CVE-2015-7975, bsc#962988: nextvar() missing length check in ntpq - CVE-2015-7974, bsc#962960: Missing key check allows impersonation between authenticated peers - CVE-2015-7973, bsc#962995: replay attack on authenticated broadcast mode - CVE-2015-5300, bsc#951629: MITM attacker can force ntpd to make a step larger than the panic threshold ------------------------------------------------------------------- Mon Mar 7 13:50:03 UTC 2016 - [email protected] - update to 4.2.8p6 * fixes low- and medium-severity vulnerabilities 4.2.8p6: CVE-2015-8158 CVE-2015-8138 CVE-2015-7978 CVE-2015-7979 CVE-2015-7977 CVE-2015-7976 CVE-2015-7975 CVE-2015-7974 CVE-2015-7973 4.2.8p5: CVE-2015-5300 * bug fixes ----------------------- -------------------------------------------- Mon Jan 18 13:08:09 UTC 2016 - [email protected] - Explicitely run /usr/sbin/sntp to synchronize in start-ntpd. When run as cron job, /usr/sbin/ is not in the path, which caused the synchronization to fail. (boo#962318) ------------------------------------------------------------------- Fri Nov 6 09:40:55 UTC 2015 - [email protected] - Fix ntp-4.2.6p2-ntpq-speedup-782060.patch to not pick arbitraty port numbers (bsc#782060). ------------------------------------------------------------------- Thu Oct 29 12:54:06 UTC 2015 - [email protected] - Update to 4.2.8p4 to fix several security issues (bsc#951608): * CVE-2015-7871: NAK to the Future: Symmetric association authentication bypass via crypto-NAK * CVE-2015-7855: decodenetnum() will ASSERT botch instead of returning FAIL on some bogus values * CVE-2015-7854: Password Length Memory Corruption Vulnerability * CVE-2015-7853: Invalid length data provided by a custom refclock driver could cause a buffer overflow * CVE-2015-7852 ntpq atoascii() Memory Corruption Vulnerability * CVE-2015-7851 saveconfig Directory Traversal Vulnerability * CVE-2015-7850 remote config logfile-keyfile * CVE-2015-7849 trusted key use-after-free * CVE-2015-7848 mode 7 loop counter underrun * CVE-2015-7701 Slow memory leak in CRYPTO_ASSOC * CVE-2015-7703 configuration directives "pidfile" and "driftfile" should only be allowed locally * CVE-2015-7704, CVE-2015-7705 Clients that receive a KoD should validate the origin timestamp field * CVE-2015-7691, CVE-2015-7692, CVE-2015-7702 Incomplete autokey data packet length checks * obsoletes ntp-memlock.patch. - Add a controlkey line to /etc/ntp.conf if one does not already exist, to allow runtime configuration via ntpq. - Use SHA1 instead of MD5 for symmetric keys (bsc#905885). - Improve runtime configuration: * Read keytype from ntp.conf * Don't write ntp keys to syslog. - Fix legacy action scripts to pass on command line arguments. - Remove ntp.1.gz, it wasn't installed anymore. - Remove ntp-4.2.7-rh-manpages.tar.gz and only keep ntptime.8.gz. The rest is partially irrelevant, partially redundant and potentially outdated (bsc#942587). - Remove "kod" from the restrict line in ntp.conf (bsc#944300). ------------------------------------------------------------------- Fri Sep 4 09:24:55 UTC 2015 - [email protected] - Add "addserver" as a new legacy action. - Fix the comment regarding addserver in ntp.conf (bnc#910063). ------------------------------------------------------------------- Thu Aug 13 15:46:29 UTC 2015 - [email protected] - Use ntpq instead of deprecated ntpdc in start-ntpd (bnc#936327). - Add a controlkey to ntp.conf to make the above work. - Don't let "keysdir" lines in ntp.conf trigger the "keys" parser. - Disable mode 7 (ntpdc) again, now that we don't use it anymore. ------------------------------------------------------------------- Thu Jul 16 12:30:16 UTC 2015 - [email protected] - Update to version 4.2.8p3 which incorporates all security fixes and most other patches we have so far (fate#319040). More information on: http://archive.ntp.org/ntp4/ChangeLog-stable - Disable chroot by default (bnc#926510). - Enable ntpdc for backwards compatibility (bnc#920238). ------------------------------------------------------------------- Tue Apr 7 10:50:00 UTC 2015 - [email protected] - update to 4.2.8p2 * fixes CVE-2015-1798, CVE-2015-1799 (medium-severity vulnerabilities involving private key authentication) * bug fixes and enhancements * New script: update-leap ------------------------------------------------------------------- Fri Mar 27 09:11:58 UTC 2015 - [email protected] - /bin/logger is needed for runtime configuration (bnc#924451). ------------------------------------------------------------------- Mon Mar 16 16:50:03 UTC 2015 - [email protected] - update to 4.2.8p1 * fixes CVE-2014-9297, CVE-2014-9298 * over 30 bugfixes and improvements - update to 4.2.8 * fixes CVE-2014-9293, CVE-2014-9294, CVE-2014-9295, CVE-2014-9296 * changed Internal NTP Era counters * ntpdc responses disabled by default * over 1100 issues resolved between the 4.2.6 branch and 4.2.8 - adjusted patches to fit 4.2.8p1: ntp-segfault_on_invalid_device.patch bnc#506908.diff MOD_NANO.diff - removed obsolete / now-in-upstream patches: ntpd-maxmonmen.patch ntp-code-cleanup.patch ntp-sntp-recverr.patch bnc#817893.patch ntp-CVE-2014-9295.patch ntp-CVE-2014-9296.patch - changes to spec file: * added --datadir (for private perl module needed by ntp scripts) and --html-dir (html docs now get installed by "make install") to configure options * script ntp-wait has moved in source tree ------------------------------------------------------------------- Mon Mar 16 01:41:26 UTC 2015 - [email protected] - *.service: Do not start ntpd when running on containers or when CAP_SYS_TIME was dropped from the default capability set ( see SYSTEMD-SYSTEM.CONF(5) for details) ------------------------------------------------------------------- Sun Mar 8 10:45:54 UTC 2015 - [email protected] - Explicitely run /usr/sbin/sntp to synchronize in start-ntpd. When run as cron job, /usr/sbin/ is not in the path, which caused the synchronization to fail. (boo#901751) ------------------------------------------------------------------- Wed Jan 21 10:23:55 UTC 2015 - [email protected] - Add ntp.NetworkManager: install NetworkManager dipatcher hook: if the DHCP Server delivers NTP Servers, accept those and configure NTP using the information (boo#900982). ------------------------------------------------------------------- Sun Jan 4 14:31:14 UTC 2015 - [email protected] - Enable avahi support ------------------------------------------------------------------- Fri Dec 19 17:48:56 UTC 2014 - [email protected] - bnc#910764: VU#852879 ntp security fixes * A potential remote code execution problem was found inside ntpd. The functions crypto_recv() (when using autokey authentication), ctl_putdata(), and configure() where updated to avoid buffer overflows that could be exploited. (CVE-2014-9295) * Furthermore a problem inside the ntpd error handling was found that is missing a return statement. This could also lead to a potentially attack vector. (CVE-2014-9296) - ntp-CVE-2014-9295.patch and ntp-CVE-2014-9296.patch will be obsoleted by the upcoming update to version 4.2.8. ------------------------------------------------------------------- Tue Dec 2 08:28:25 UTC 2014 - [email protected] - fix typo in version check regarding /usr/lib/initscripts/legacy-actions to fix build for <= 13.1 ------------------------------------------------------------------- Fri Sep 26 12:55:35 UTC 2014 - [email protected] - Re-enable the ntptimeset legacy init script action (bnc#893406). ------------------------------------------------------------------- Tue Sep 9 02:28:20 UTC 2014 - [email protected] - conf.ntpd.service: Must run with PrivateTmp set to true ------------------------------------------------------------------- Tue Jul 15 18:50:47 UTC 2014 - [email protected] - Ensure systemd services conflict with systemd-timesyncd.service present in upcoming systemd releases. ------------------------------------------------------------------- Wed Jun 18 09:04:59 UTC 2014 - [email protected] - Try to fix broken migration from openSUSE-13.1 ------------------------------------------------------------------- Thu Jun 12 15:36:51 UTC 2014 - [email protected] - Forward-port some bugs that got fixed for SLE11 (bnc#831311): * bnc#817893 * bnc#482349 * bnc#817893.patch ------------------------------------------------------------------- Thu Jun 5 13:54:02 UTC 2014 - [email protected] - Cleanup with spec cleaner for better readability - Remove conditionals for < 12.2 distros as it does not work on them anyway. ------------------------------------------------------------------- Mon May 5 19:18:00 UTC 2014 - [email protected] - fix start-ntpd again: service is now called ntpd, not ntp ------------------------------------------------------------------- Tue Apr 29 13:24:32 UTC 2014 - [email protected] - Remove /var/run/ntp from the package: http://lists.opensuse.org/opensuse-packaging/2014-04/msg00046.html - Fix Provides/Obsoletes of package aliases. - Add /usr/sbin/rc* links. - Stay enabled across sysv to systemd migrations (bnc#875490). ------------------------------------------------------------------- Sat Apr 19 17:16:36 UTC 2014 - [email protected] - fix "start-ntp addserver": start-ntp has no "status" method ------------------------------------------------------------------- Thu Apr 3 07:05:40 UTC 2014 - [email protected] - Remove empty insserv call whic hhad only caused an error message - Correct 50-ntp.list to include ntpd.service ------------------------------------------------------------------- Mon Mar 31 13:32:26 UTC 2014 - [email protected] - Restart nptd if failed or aborted (FATE#315133) ------------------------------------------------------------------- Thu Mar 27 18:07:16 UTC 2014 - [email protected] - Service unit files are no executables ------------------------------------------------------------------- Thu Mar 27 17:44:48 UTC 2014 - [email protected] - Use correct ntp-wait script from source tar ball (bnc#864193) - Implement new ntp-wait.service to provide time-sync.target - A few cleanups on the new start script of ntpd ------------------------------------------------------------------- Thu Mar 27 10:38:23 CET 2014 - [email protected] - Add missing systemd %pre macro ------------------------------------------------------------------- Tue Mar 4 10:57:57 UTC 2014 - [email protected] - Add systemd configuration and start script ------------------------------------------------------------------- Fri Feb 14 10:53:14 UTC 2014 - [email protected] - bnc#863815, ntp-sntp-recverr.patch: Get sntp to recognize socket errors, so that it skips unreachable destinations immediately instead of trying to reach them for more than five minutes before finally timing out. This patch will probably be obsoleted by the next major upgrade, because the current development release takes a different approach to get a quick answer from one of the specified servers. ------------------------------------------------------------------- Mon Jan 20 16:41:52 UTC 2014 - [email protected] - CVE-2013-5211, bnc#857195: restrict query, configuration, modification access from world by default. Avoids that ntp can be used as a DDoS amplifier. ------------------------------------------------------------------- Tue Oct 22 14:49:25 UTC 2013 - [email protected] - bnc#838458 ntp start script does not update /var/lib/ntp/etc/localtime file if /etc/localtime is symlink ------------------------------------------------------------------- Mon Aug 19 22:58:44 UTC 2013 - [email protected] - Build with -DOPENSSL_LOAD_CONF , ntp must respect and use the system's openssl configuration. ------------------------------------------------------------------- Sat Mar 9 13:34:16 UTC 2013 - [email protected] - fix build with automake-1.13 ------------------------------------------------------------------- Thu Feb 28 07:52:03 UTC 2013 - [email protected] - bnc#797351 - ntpd "listen-on" directive support is missing/broken; unable to restrict/secure listening IPs ------------------------------------------------------------------- Tue Feb 26 14:58:38 UTC 2013 - [email protected] - bnc#793012 - NTP default to 'sync time on startup' conflicts with NetworkManager ------------------------------------------------------------------- Fri Feb 22 09:19:08 CET 2013 - [email protected] - disable Undisciplined Local Clock in default conf file (bnc#784760) ------------------------------------------------------------------- Fri Jan 18 14:18:09 UTC 2013 - [email protected] - Speedup ntpq (bnc#782060) +ntp-4.2.6p2-ntpq-speedup-782060.patch ------------------------------------------------------------------- Thu Jan 17 17:37:35 UTC 2013 - [email protected] - bnc#450196 - ext3 - recovering journal on / on first boot on new kernel/fresh system updates - bnc#774553 - ntp initscript: hwclock: With --noadjfile, you must specify either --utc or --localtime ------------------------------------------------------------------- Fri Dec 14 10:14:41 UTC 2012 - [email protected] - logrotate is not strictly required for operation of ntp so change it to Suggested. That way the minimal installation doesn't draw in cron and postfix. ------------------------------------------------------------------- Thu Aug 2 13:17:57 UTC 2012 - [email protected] - Created the correct link to /run/ntp ------------------------------------------------------------------- Thu Jul 19 04:47:46 UTC 2012 - [email protected] - Openssl wanted but not properly detected, fixed. ------------------------------------------------------------------- Wed Jul 4 13:51:57 UTC 2012 - [email protected] - license update: (MIT and BSD-3-Clause and BSD-4-Clause) and GPL-2.0 Properly categorise licenses and sync with Fedora declaration ------------------------------------------------------------------- Mon Apr 23 11:02:06 UTC 2012 - [email protected] - bnc#758253 - L3: ntp fails if host has more than 1024 IP-addresses ntp#1180 - ntpd won't start with more than 1000 interfaces ------------------------------------------------------------------- Mon Jan 9 18:45:15 UTC 2012 - [email protected] - Remove superfluous remove of acconfig.h while build. - BuildRequire autoconf to avoid implicit dependency for post-11.4 systems. - Remove call to suse_update_config macro for post-11.4 systems. ------------------------------------------------------------------- Mon Jan 9 18:38:10 UTC 2012 - [email protected] - BuildRequire fdupes for post-10.1 systems. - Do not call autoreconf for pre-10.2 systems. ------------------------------------------------------------------- Mon Jan 9 18:11:27 UTC 2012 - [email protected] - Update to version 4.2.6p5. - ntpd * Updated "nic" and "interface" IPv6 address handling to prevent mismatches with localhost [::1] and wildcard [::] which resulted from using the address/prefix format (e.g. fe80::/64) * Fix orphan mode stratum incorrectly counting to infinity * Orphan parent selection metric updated to includes missing ntohl() * Non-printable stratum 16 refid no longer sent to ntp * Duplicate ephemeral associations suppressed for broadcastclient and multicastclient without broadcastdelay * Exclude undetermined sys_refid from use in loopback TEST12 * Exclude MODE_SERVER responses from KoD rate limiting * Include root delay in clock_update() sys_rootdisp calculations * get_systime() updated to exclude sys_residual offset (which only affected bits "below" sys_tick, the precision threshold) * sys.peer jitter weighting corrected in sys_jitter calculation - ntpq * -n option extended to include the billboard "server" column * IPv6 addresses in the local column truncated to prevent overruns - Update to version 4.2.6p4. - Build system * Fix checking for struct rtattr * Upgrade required version of autogen and libopts for building from our source code repository - ntpd * Back-ported several fixes for Coverity warnings from ntp-dev * Fix a rare boundary condition in UNLINK_EXPR_SLIST() * Allow "logconfig =allall" configuration directive * Bind tentative IPv6 addresses on Linux * Correct WWVB/Spectracom driver to timestamp CR instead of LF * Improved tally bit handling to prevent incorrect ntpq peer status reports * Exclude the Undisciplined Local Clock and ACTS drivers from the initial candidate list unless they are designated a "prefer peer" * Prevent the consideration of Undisciplined Local Clock or ACTS drivers for selection during the 'tos orphanwait' period· * Prefer an Orphan Mode Parent over the Undisciplined Local Clock or ACTS drivers * Improved support of the Parse Refclock trusttime flag in Meinberg mode * Back-port utility routines from ntp-dev: mprintf(), emalloc_zero() * Code cleanup in libntpq - ntpdc * Fix timerstats reporting - ntpdate * Reduce time required to set clock * Allow a timeout greater than 2 seconds - sntp * Backward incompatible command-line option change: -l/--filelog changed -l/--logfile (to be consistent with ntpd) - Documentation * Update html2man. Fix some tags in the .html files * Distribute ntp-wait.html ------------------------------------------------------------------- Mon Jan 9 17:35:16 UTC 2012 - [email protected] - Remove superfluously used NTPD_PID_NOPREFIX from init script. - Refresh patches to apply with no offset. ------------------------------------------------------------------- Thu Nov 24 14:56:45 UTC 2011 - [email protected] - bnc#730374 - Hardware Clock does not get synchronized ------------------------------------------------------------------- Wed Nov 23 09:29:50 UTC 2011 - [email protected] - add libtool as buildrequire to avoid implicit dependency ------------------------------------------------------------------- Thu Oct 27 08:52:39 UTC 2011 - [email protected] - bnc#656509 - don't use --bind on /var/lib/ntp/proc ------------------------------------------------------------------- Fri Aug 26 08:11:33 UTC 2011 - [email protected] - bnc#699724 - ntpdate was replaced with a dud script ------------------------------------------------------------------- Wed Jun 1 09:07:48 UTC 2011 - [email protected] - The default timeout for sntp is to long. This can stop booting - bnc#689070 - ntp post install script always removes /etc/sysconfig/ntp - bnc#688529 - (ntp) ntpq and ntpdc command history broken - bnc#695598 - "Started sntp" in /var/log/messages ------------------------------------------------------------------- Sun May 1 23:15:01 CEST 2011 - [email protected] - fix "rcntp ntptimeset" * never try to syncronize with local clocks (127.127.*), which led to sntp blocking until timeout elapsed (and probably blocking boot sequence for ~5 min per device..) - fix DOS line breaks in some doc files ------------------------------------------------------------------- Tue Apr 26 06:56:05 UTC 2011 - [email protected] - fix/improve init script * related to bugzilla 688132 * "rcntp ntptimeset" could not parse servers from ntp.conf when IP proto was specified (server [-4|-6] hostname) * "rcntp ntptimeset" is now using ip proto parameter (-4|-6) if it's set in NTPD_OPTIONS and skip servers where the opposite proto is defined ------------------------------------------------------------------- Fri Apr 1 16:50:21 CET 2011 - [email protected] - replace remove-ntpdate.diff with sed script - don't effectively zap existing /etc/sysconfig/ntp - while at it, simplify /etc/sysconfig/ntp update - improve NTP_PARSE_DEVICE documentation for /etc/sysconfig/ntp - refresh all patches with offsets and fuzz ------------------------------------------------------------------- Thu Feb 3 17:15:03 CET 2011 - [email protected] - updated the sntp syntax also in our ntpdate script (bnc#658255#c2) ------------------------------------------------------------------- Tue Jan 4 14:10:37 UTC 2011 - [email protected] - update to version 4.2.6p3 * main feature, it really ! updates the time, old version was miscalculating the offset based on t21 and t34 ------------------------------------------------------------------- Tue Jan 4 08:15:47 UTC 2011 - [email protected] - require $network startup before ntp. This is not enforced via $network_fs when no nfs and cifs is enabled ------------------------------------------------------------------- Thu Dec 14 14:23:05 UTC 2010 - [email protected] - bnc#657194 - compile with --enable-ntp-signd ------------------------------------------------------------------- Mon Dec 13 14:12:44 UTC 2010 - [email protected] - bnc#658799 - ntp init script makes /proc readonly, blocking login ------------------------------------------------------------------- Wed Dec 8 15:06:23 UTC 2010 - [email protected] - bnc#658255 - ntpd is not working and sntp complains about unknown options ------------------------------------------------------------------- Tue Nov 30 12:07:50 UTC 2010 - [email protected] - update to 4.2.6p2 * Major code clean up. 1. The protostats statistics files have been very useful in exposing little twitches and turns when something hiccups, like a broken PPS signal. Most of what used to be syslog messages are now repackaged as protostats messages with optional syslog as well. 2. Close inspection of the clock discipline behavior at long poll intervals (36 h) showed it not doing as well as it should. 3. Autokey. The enhanced error checking was becoming a major pain. A way was found to toss out gobs of ugly fat code and replace the function with a much simpler and more comprehensive scheme. 4. The interface code for the kernel PPS signal was not in sync with the kernel code itself. Some error checks were duplicated and some ineffective. 5. The flake restrict bit turned out to be really interesting, especially with symmtric modes and of those especially those using Autokey. * Documentation updates - New old feature: sync time on startup. If not needed NTPD_FORCE_SYNC_ON_STARTUP must be set to no in /etc/sysconfig/ntp ------------------------------------------------------------------- Tue Sep 28 10:56:28 UTC 2010 - [email protected] - Handle /var/run as tmpfs ------------------------------------------------------------------- Fri Apr 23 10:59:52 UTC 2010 - [email protected] - Set time by starting ntp via ntptimeset ------------------------------------------------------------------- Fri Apr 9 15:30:57 UTC 2010 - [email protected] - rcntp timeset now gets the time via sntp inmediately ------------------------------------------------------------------- Sun Mar 21 20:10:55 UTC 2010 - [email protected] - fix read-only mount of proc in chroot ------------------------------------------------------------------- Thu Mar 18 16:58:21 UTC 2010 - [email protected] - bnc#574885 - XEN is using many network interfaces and stopping and restarting XEN instances results in ntpd error "Cannot find existing interface for address ...". ------------------------------------------------------------------- Wed Jan 6 04:56:39 UTC 2010 - [email protected] - enable parallel build ------------------------------------------------------------------- Wed Dec 9 11:46:49 CET 2009 - [email protected] - update to ntp-4.2.4p8 to fix bnc#550316 - VUL-0: ntp DoS - bnc#557716 - NTP PLL does not converge based on https://support.ntp.org/bugs/show_bug.cgi?id=1219 ------------------------------------------------------------------- Sat Nov 28 12:22:22 UTC 2009 - [email protected] - Also fix multiple mount on multiple "rcntp start" invocations ------------------------------------------------------------------- Mon Aug 31 16:49:50 CEST 2009 - [email protected] - Really fix the multiple mount bug in ntp init script (bnc#517222) ------------------------------------------------------------------- Mon Jul 20 13:34:30 CEST 2009 - [email protected] - bnc#517222 – Minor patch for ntp init-script ------------------------------------------------------------------- Tue Jul 14 14:26:44 CEST 2009 - [email protected] - Add ntp-4.2.4p7-autoconf.patch to fix build failure. ------------------------------------------------------------------- Fri Jul 10 18:21:08 CEST 2009 - [email protected] - bnc#515629 - NM_ONLINE_TIMEOUT does not work with parallel boot - bnc#521044 - ntp init script: /etc/init.d/ntp: line 70: return: can only `return' from a function or sourced script ------------------------------------------------------------------- Fri Jun 19 10:21:08 CEST 2009 - [email protected] - bnc#506908 - ntptrace doesn't work as non root user - update to 4.2.4p7: * [Sec 1151] Remote exploit if autokey is enabled - CVE-2009-1252. * [Bug 1187] Update the copyright date. * [Bug 1191] ntpd fails on Win2000 - "Address already in use" after fix for [Sec 1149]. * ntp.isc.org -> ntp.org cleanup. * [Bug 1178] Use prior FORCE_DNSRETRY behavior as needed at runtime, add configure --enable-ignore-dns-errors to be even more stubborn * [Bug 784] Make --enable-linuxcaps the default when available * [Bug 1179] error messages for -u/--user and -i lacking droproot * Updated JJY reference clock driver from Takao Abe * [Bug 1071] Log a message and exit before trying to use FD_SET with a descriptor larger than FD_SETSIZE, which will corrupt memory * On corruption of the iface list head in add_interface, log and exit * [Bug 1172] 4.2.4p7-RC{3,4} fail to build on linux. * flock-build script unportable 'set -m' use removed * [Bug 1167] use gcc -Winit-self only if it is understood * [Bug 787] Bug fixes for 64-bit time_t on Windows * [Bug 813] Conditional naming of Event * [Bug 1147] System errors should be logged to msyslog() * [Bug 1155] Fix compile problem on Windows with VS2005 * [Bug 1156] lock_thread_to_processor() should be declared in header * [Bug 1157] quiet OpenSSL warnings, clean up configure.ac * [Bug 1158] support for aix6.1 * [Bug 1160] MacOS X is like BSD regarding F_SETOWN * [Sec 1144] limited buffer overflow in ntpq. CVE-2009-0159 * [Sec 1149] use SO_EXCLUSIVEADDRUSE on Windows * [Bug 1131] UDP sockets should not use SIGPOLL on Solaris. * build system email address cleanup * [Bug 774] parsesolaris.c does not compile under the new Solaris * [Bug 873] Windows serial refclock proper TTY line discipline emulation * [Bug 1014] Enable building with VC9 (in Visual Studio 2008, Visual C++ 2008, or SDK) * [Bug 1117] Deferred interface binding under Windows works only correctly if FORCE_DNSRETRY is defined * [BUG 1124] Lock QueryPerformanceCounter() client threads to same CPU * DPRINTF macro made safer, always evaluates to a statement and will not misassociate an else which follows the macro. ------------------------------------------------------------------- Wed May 6 10:28:06 CEST 2009 - [email protected] - bnc#468685 - ntpd causes 16 wakeups per second ------------------------------------------------------------------- Wed Apr 29 13:33:23 CEST 2009 - [email protected] - bnc#492304 - ntpd man page refers to package xntp-doc (which does not exist) - bnc#495496 – ntp misses prereq: /sbin/chkconfig ------------------------------------------------------------------- Thu Jan 8 14:14:12 CET 2009 - [email protected] - Fixed build errors with recent versions of openSSL. - Fix incorrect check of EVP_VerifyFinal()'s return value. (bnc#459662 - VUL-0: ntp does not check return value of EVP_VerifyFinal) ------------------------------------------------------------------- Fri Nov 14 09:02:14 CET 2008 - [email protected] - (bnc#443228) - Successor of ntpdate (descriped in deprecation note) does not work ------------------------------------------------------------------- Mon Nov 10 15:46:11 CET 2008 - [email protected] - (bnc#443304) - netconfig: NTP server not set when using dhcpcd ------------------------------------------------------------------- Fri Nov 7 10:04:44 CET 2008 - [email protected] - (bnc#438630) - can't install from livecd - no ntp-server timeout ------------------------------------------------------------------- Wed Oct 29 17:54:19 CET 2008 - [email protected] - (bnc#439813) - autobuild does not run because time is appearently out of sync ------------------------------------------------------------------- Fri Oct 24 09:30:06 CEST 2008 - [email protected] - Add ntp-wait script. This tests if the time is synchronized. Very important for time critical services like kerberos. ------------------------------------------------------------------- Thu Oct 23 08:59:49 CEST 2008 - [email protected] - (bnc#437982) - /usr/sbin/ntpdate: line 27: shift: -1: shift count out of range - (bnc#437968) - Typo and usability issue in deprecation output of ntpdate ------------------------------------------------------------------- Fri Oct 17 08:21:31 CEST 2008 - [email protected] - clean up the sources to avoid a lot of compiler warnings - fixing some unaligned accesses (bnc#430059) ------------------------------------------------------------------- Mon Oct 13 19:36:40 CEST 2008 - [email protected] - (bnc#434529) - SLES11 Beta2: Firewall opens both TCP and UDP for ntp - ntpdate is now a wrapper script around sntp. All parameters except for the time server will be ignored ------------------------------------------------------------------- Wed Oct 8 17:39:18 CEST 2008 - [email protected] - Remove redundand patches - Remove ntpdate because this is obsolete. ------------------------------------------------------------------- Tue Oct 7 13:54:24 CEST 2008 - [email protected] - Don't try to umount /proc. - Fix error handling. ------------------------------------------------------------------- Thu Oct 2 11:15:27 CEST 2008 - [email protected] - (bnc#431175) - ntpd hangs during init ------------------------------------------------------------------- Fri Sep 26 16:23:47 CEST 2008 - [email protected] - (bnc#387236) - VUL-0: ntp complains about format/parity error for MD5 key 1, not used In the ntp 4.2.4p5 version this problem is solved. Only the 4.2.4-w32-time-authentification patch had caused it that that did not function. Now we have droped this patch. ------------------------------------------------------------------- Thu Sep 11 09:01:11 CEST 2008 - [email protected] - (bnc#407804) - ntpd stalls boot process ------------------------------------------------------------------- Tue Sep 9 12:15:42 CEST 2008 - [email protected] - (bnc#274833) - Cypress beta site would like to see NTP as a service to monitor under Health Monitor in NRM. - update to 4.2.4p5 which * Month off by one in leap second message written to clockstats file fixed. * Built-in getpass() function also prompts for password if not built with DEBUG. * Fix memory leak when fetching system messages. * Wake up the resolver thread/process when a new interface has become available. * Correctly apply negative-sawtooth for oncore 12 channel receiver. * Startup code for original LinuxPPS removed. LinuxPPS now conforms to the PPSAPI. * drop minimum time restriction for interface update interval. * Fix mismatching #ifdefs for builds without IPv6. * Update the copyright year. * Build system cleanup (make autogen-generated files writable). * nptdate timeout is too long if several servers are supplied. * ntpdate debug mode adjusts system clock when it shouldn't. * ntpdate(and ntptimeset) buffer overrun if HAVE_POLL_H isn't set ------------------------------------------------------------------- Mon Sep 8 11:45:14 CEST 2008 - [email protected] - (bnc#423463) - 2 bugs found in ntpd init script ------------------------------------------------------------------- Tue Jun 17 11:43:45 CEST 2008 - [email protected] - (bnc#398437) - ntp client has missing dependency to package timezone - (bnc#397422) - ntp rpm throws an error when installing ------------------------------------------------------------------- Mon May 26 23:08:42 CEST 2008 - [email protected] - (bnc#393305) – /etc/ntp.conf gets overwritten during an update ------------------------------------------------------------------- Tue May 20 14:35:21 CEST 2008 - [email protected] - (bnc#388980) – "hang" on boot to runlevel 3 ------------------------------------------------------------------- Wed May 14 14:07:31 CEST 2008 - [email protected] - Create needed if-{up,down}.d symlinks during installation; [bnc#256291]. ------------------------------------------------------------------- Tue May 6 17:27:37 CEST 2008 - [email protected] - Fix provides to get rename on distribution upgrade ------------------------------------------------------------------- Tue Apr 1 13:58:46 CEST 2008 - [email protected] - Changed init script to avoid waiting for input on stdin when it trys to parse $NTP_KEYS file. ------------------------------------------------------------------- Mon Mar 31 16:03:11 CEST 2008 - [email protected] - Wait for ntpd to finish during ntptimeset. ------------------------------------------------------------------- Wed Mar 26 12:34:14 CET 2008 - [email protected] - Fix syntax errors in the init script. ------------------------------------------------------------------- Tue Mar 25 17:44:11 CET 2008 - [email protected] - Fix IPv6 support in chroot jail; [bnc#333525]. ------------------------------------------------------------------- Tue Mar 25 10:52:19 CET 2008 - [email protected] - Fix broken init script; [bnc#365515]; ------------------------------------------------------------------- Tue Mar 25 10:22:52 CET 2008 - [email protected] - Install SuSEfirewall2 service file into the right directory; [bnc#370482]. ------------------------------------------------------------------- Fri Mar 14 09:04:48 CET 2008 - [email protected] - Make ntp.init LSB compliant. - Fix permissions of image file. - Use fdupes. ------------------------------------------------------------------- Wed Mar 12 15:07:17 CET 2008 - [email protected] - Fix paren nesting. ------------------------------------------------------------------- Tue Jan 22 10:05:49 CET 2008 - [email protected] - fix specfile o check for file before the file is removed o remove a "cut" error on some systems o fix provides conflict with openntp - readd sysconfig varible NTPD_RUN_CHROOTED - fix ifupdown script ------------------------------------------------------------------- Wed Jan 16 10:43:35 CET 2008 - [email protected] - Fate #301836: NTP XML Service Description Document ------------------------------------------------------------------- Mon Jan 7 12:01:57 CET 2008 - [email protected] - Bug 351059 - ntpd should not run with gid=0 ------------------------------------------------------------------- Mon Nov 5 12:22:53 CET 2007 - [email protected] - Bug 217032 - xntp rpm package name: eliminate x - rename patches to a consistent layout ntp*.patch ------------------------------------------------------------------- Thu Oct 18 11:53:04 CEST 2007 - [email protected] - update to 2.4.4p4 which o Fix problems with the -6 flag. o Avoid ntpdc use of refid value as unterminated string. o Corrected display of pll offset on 64bit systems. o Corrected sign handling on 64bit in ntpdc loopinfo command. o avoid malloc() interrupted by SIGIO risk o cleanup shutdown while the file descriptor is still open. o use emalloc() to get a message at the end of the memory o don't access recv buffers after having them passed to the free list. o allow loopback interfaces to share addresses with other interfaces. ------------------------------------------------------------------- Wed Aug 29 11:25:43 CEST 2007 - [email protected] - Bug 283706 – ntpdate in the init script of ntp fails if the network interface is not active - Bug 256291 - setting initial time and date via ntp and mounting of nfs shares with network manager fails ------------------------------------------------------------------- Mon Jul 9 11:52:07 CEST 2007 - [email protected] - update to 2.4.4p3 which o Broadcast address was not correctly set for interface addresses o reduce syslog noise, while there fix Enabled/Disable logging to reflect the actual configuration o Moved declaration of variable to top of function o Fix multicast client crypto authentication and make sure arriving multicast packets do not disturb the autokey dance o Don't write from source address length to wrong location o Upgraded autogen and libopts o ntpd should not read a .ntprc file ------------------------------------------------------------------- Tue Jun 5 12:58:02 CEST 2007 - [email protected] - file /var/log/ntp is not owned by any package (#280507) ------------------------------------------------------------------- Mon Jun 4 11:23:07 CEST 2007 - [email protected] - ntp pollutes the log on ia64 (#272938) ------------------------------------------------------------------- Mon May 14 11:07:14 CEST 2007 - [email protected] - readline support for ntp (#246428) ------------------------------------------------------------------- Fri Apr 13 09:41:04 CEST 2007 - [email protected] - "rcxntpd start" fails with "ntpd[8013]: crypto_setup: random seed file //.rnd not found" (#232512) ------------------------------------------------------------------- Thu Mar 29 15:54:17 CEST 2007 - [email protected] - add pwdutils BuildRequires for postinstall script execution ------------------------------------------------------------------- Thu Mar 22 12:40:26 CET 2007 - [email protected] - ntp patch broken/md5 keys unusable (#253635) ------------------------------------------------------------------- Thu Mar 8 10:45:57 CET 2007 - [email protected] - ntpq man page is corrupt (#251136) - xntp (server) - Ports for SuSEfirewall added via packages (#251672) ------------------------------------------------------------------- Mon Mar 5 14:21:22 CET 2007 - [email protected] - Fix broken patch. ------------------------------------------------------------------- Tue Feb 27 09:27:18 CET 2007 - [email protected] - update to version 4.2.4 which o update html help pages o sntp now uses the returned precision to control decimal places o Fix a lot of bugs ------------------------------------------------------------------- Thu Jan 25 09:54:57 CET 2007 - [email protected] - ntpd pid file problems (#230273) ------------------------------------------------------------------- Wed Jan 10 13:52:52 CET 2007 - [email protected] - W32Time authentication support in NTP (fate #300767) ------------------------------------------------------------------- Wed Nov 8 09:31:23 CET 2006 - [email protected] - update to version 4.2.2p4 which o fix some bugs ------------------------------------------------------------------- Thu Nov 2 11:50:33 CET 2006 - [email protected] - fix bug #207079 - NTP setup to start on boot fails everytime ------------------------------------------------------------------- Tue Oct 17 14:05:01 CEST 2006 - [email protected] - change init script and sysconfig file - it's now possible to synchronize time only if the service restart. (see Bug #211031) ------------------------------------------------------------------- Mon Oct 9 12:46:44 CEST 2006 - [email protected] - update to version 4.2.2p3 which o use the new format of the "send" emails o Change mode to -rwxrwxr-x o Clean up the ChangeLog generation ------------------------------------------------------------------- Thu Aug 31 14:43:17 CEST 2006 - [email protected] - fix bug #169052 - xntp: typo in man page - fix bug #200178 - NTP error message at startup ------------------------------------------------------------------- Tue Jul 25 11:57:39 CEST 2006 - [email protected] - update to version 4.2.2p2 which o cleanup o fix some bugs o Resolve the ambiguity in the copyright file o fix for bug #158199 (ntpdate -q reports 0 offset on IPv6) ------------------------------------------------------------------- Thu Jun 29 14:26:28 CEST 2006 - [email protected] - NetworkManager script: use start instead of try-restart (#188613). ------------------------------------------------------------------- Tue Apr 18 17:09:22 CEST 2006 - [email protected] - NetworkManager ntp script: s/restart-iburst/try-restart-iburst/ as the former is not a valid command. Fixes Novell bug #163139. ------------------------------------------------------------------- Thu Feb 2 17:43:29 CET 2006 - [email protected] - Add NetworkManagerDispatcher script 'ntp' to automatically restart ntp whenever the network connection cycles ------------------------------------------------------------------- Thu Jan 26 11:20:54 CET 2006 - [email protected] - Use cp -L in chroot setup to always follow symbolic links [145169] ------------------------------------------------------------------- Wed Jan 25 21:43:18 CET 2006 - [email protected] - converted neededforbuild to BuildRequires ------------------------------------------------------------------- Fri Jan 13 15:08:53 CET 2006 - [email protected] - Make use of Stack Protector ------------------------------------------------------------------- Fri Dec 2 15:35:52 CET 2005 - [email protected] - update to snapshot 20050816 - fix some warnings - better group handling - fix local clock submission - add manpages from redhat ------------------------------------------------------------------- Mon Nov 21 15:15:30 CET 2005 - [email protected] - add function to update the cmos clock before starting ntpd [#132918] - clean up sysconfig file ------------------------------------------------------------------- Sat Nov 12 15:41:37 CET 2005 - [email protected] - Add libcap-devel to nfb [#132236]. ------------------------------------------------------------------- Tue Nov 8 01:56:40 CET 2005 - [email protected] - fix upgrading of xntp (fallout of ntp group change) ------------------------------------------------------------------- Mon Nov 7 14:10:24 CET 2005 - [email protected] - quote NTP_PARSE_DEVICE also ------------------------------------------------------------------- Wed Oct 12 16:10:11 CEST 2005 - [email protected] - Add -fno-strict-aliasing - create ntp group and use it [#127548] - implement /dev/refclock-0 link workaround [#116701] ------------------------------------------------------------------- Sun Sep 18 11:58:44 CEST 2005 - [email protected] - Add libcap-devel to nfb ------------------------------------------------------------------- Thu Sep 15 12:42:35 CEST 2005 - [email protected] - fix typo in the init script usage message ------------------------------------------------------------------- Thu Sep 8 14:59:47 CEST 2005 - [email protected] - pass the runlevel to the chkconfig test in post because we are in no runlevel during yast update and that resulted in the test always being false (no xntpd in runlevel "unknown") This fixes [#100413] for real. ------------------------------------------------------------------- Thu Aug 25 13:06:39 CEST 2005 - [email protected] - Add the possibility to copy more files to the chroot. Needed for instance to use autokeys [#104873] ------------------------------------------------------------------- Fri Aug 5 11:16:00 CEST 2005 - [email protected] - more work for update case: rename fillup vars from XNTPD to NTPD - fix fillup calls ------------------------------------------------------------------- Wed Aug 3 14:27:22 CEST 2005 - [email protected] - make sure an enabled xntpd is also enabled after update if it was enabled before [#100413] - old package will %stop_on_removal for old name ------------------------------------------------------------------- Wed Jul 13 11:03:31 CEST 2005 - [email protected] - rename most config files, init scripts and the like from xntpd to ntp to be in sync with other vendors/LSB - simplify specfile and document it a bit - always enable ipv6 - enable sntp - make ntp.conf not world readable anymore. it may contain sensitive information - remove the scripts from the package. they mostly dont work ------------------------------------------------------------------- Thu Jun 30 17:52:41 CEST 2005 - [email protected] - build with -fPIE (not -fpie) to avoid GOT overflow on s390x ------------------------------------------------------------------- Fri Jun 17 13:34:08 CEST 2005 - [email protected] - update to version 4.2.0a-20050303 - Compile with -fpie/-pie ------------------------------------------------------------------- Tue May 17 12:26:54 CEST 2005 - [email protected] - fix option syntax in init script (Bug #83980) ------------------------------------------------------------------- Thu Apr 28 15:10:54 CEST 2005 - [email protected] - enable ssl encryption (#81064) ------------------------------------------------------------------- Thu Apr 7 12:23:59 CEST 2005 - [email protected] - fix array decls to make gcc4 happy ------------------------------------------------------------------- Mon Mar 14 11:45:49 CET 2005 - [email protected] - change "running from init or not" detection to use INIT_VERSION instead of links = base. (Bug #71230) ------------------------------------------------------------------- Thu Feb 10 13:15:07 CET 2005 - [email protected] - Use group argument so ntpd runs as nogroup. (50684) - Apply patch for so ntpd can also use groupnames. (50684) ------------------------------------------------------------------- Wed Jan 26 17:14:07 CET 2005 - [email protected] - fix segfault while trying to use a IPV6 address without a IPV6 stack. Ignore the address instead. (Bug #47860) ------------------------------------------------------------------- Thu Dec 9 15:58:03 CET 2004 - [email protected] - we need try-restart-iburst not restart-iburst ------------------------------------------------------------------- Wed Dec 8 11:26:01 CET 2004 - [email protected] - add restart-iburst option to the init script so we can restart xntp from ip-up to prevent ntpd from loosing sync when the ip of an interface changes. (Bug #48654) - use try-restart from skeleton - simplify optflags usage ------------------------------------------------------------------- Tue Nov 30 19:46:51 CET 2004 - [email protected] - fix typo in the init script - fix force-reload to use try-restart - add monlist patch ------------------------------------------------------------------- Tue Oct 5 20:07:40 CEST 2004 - [email protected] - Use sbindir as prefix of ntpq in the ntptrace script, [#46861]. ------------------------------------------------------------------- Fri Sep 10 18:38:10 CEST 2004 - [email protected] - It's +2 years ago something happened that would need our attten- tion when updating. So remove [#44352] ------------------------------------------------------------------- Fri Sep 10 17:33:55 CEST 2004 - [email protected] - Fix documentation for ntptrace (#36636) ------------------------------------------------------------------- Thu Aug 5 17:50:48 CEST 2004 - [email protected] - Update to the 20040617 snapshot. - Don't pass '-u' to ntpdate in the init script (bug #41140) - Fix code to not break strict aliasing. ------------------------------------------------------------------- Tue Mar 30 11:26:40 CEST 2004 - [email protected] - Don't create temporary files in /tmp during post installation. Fixes #37435. ------------------------------------------------------------------- Mon Mar 29 15:27:58 CEST 2004 - [email protected] - fix slp registration ------------------------------------------------------------------- Thu Mar 11 18:00:11 CET 2004 - [email protected] - register ntpd via slp.reg.d file ------------------------------------------------------------------- Tue Mar 9 16:57:17 CET 2004 - [email protected] - Make syslog create a socket in ntpd's chroot jail so that ntpd can continue logging. - Make configure option --enable-linuxcaps visible on linux hosts. - pass --enable-linuxcaps to configure to enable running chroot. ------------------------------------------------------------------- Fri Mar 5 18:57:19 CET 2004 - [email protected] - Update to ntp 4.2.0a-20040225 as this version has support for running ntpd inside a chroot jail. - Have syslog create an additional socket in the chroot jail. - Remove patches obsoleted by the update :) ------------------------------------------------------------------- Thu Feb 19 10:21:56 CET 2004 - [email protected] - Cleanup neededforbuild ------------------------------------------------------------------- Sat Jan 10 20:16:32 CET 2004 - [email protected] - add %defattr ------------------------------------------------------------------- Tue Sep 9 18:09:20 CEST 2003 - [email protected] - Don't include files possibly created at runtime, not even as ghost. - On real uninstall remove files copied to the chroot by initscript and the log file. - Also fixes 'rpm -V' output (#29596) ------------------------------------------------------------------- Thu Sep 4 12:14:50 CEST 2003 - [email protected] - Fix segfault in ntpd on startup when a device can't be opened. - Shorten the changelog a bit. ------------------------------------------------------------------- Fri Aug 29 18:30:17 CEST 2003 - [email protected] - Fix options to tail and sort in example scripts. (#29652) ------------------------------------------------------------------- Fri Aug 29 11:40:19 CEST 2003 - [email protected] - Call useradd -r to create system account [Bug #29611] ------------------------------------------------------------------- Fri Aug 22 19:31:23 CEST 2003 - [email protected] - Fix configure.in,acinclude.m4 and Makefile.am so that autoreconf can be run. - Fix all cases of type-punning. - Add -lcap where necessary. - Fix bug in ntp-4.1.1-noroot.patch that made ntpd ignore an existing drift file instead of actually reading it (fixes bugzilla #27464). ------------------------------------------------------------------- Thu Aug 21 19:15:33 CEST 2003 - [email protected] - Add stop_on_removal and restart_on_update macros to preun and postun section - Add XNTPD_RUN_CHROOTED to sysconfig file and init script - Modify init script to setup chroot environment if needed - Autoconvert ntp.conf in case of an old driftfile location ------------------------------------------------------------------- Tue Aug 19 11:11:34 CEST 2003 - [email protected] - Add sysconfig metadata [#28963] ------------------------------------------------------------------- Wed Jul 2 18:09:59 CEST 2003 - [email protected] - Updated manpage (new home of the ntp project is at www.ntp.org). ------------------------------------------------------------------- Tue May 20 13:19:12 CEST 2003 - [email protected] - Fixed manpages. ------------------------------------------------------------------- Wed May 14 17:39:16 CEST 2003 - [email protected] - %ghost /var/log/ntp ------------------------------------------------------------------- Thu May 1 20:08:01 CEST 2003 - [email protected] - rcxntpd script didn't handle leading blanks in /etc/ntp.conf (#19847) ------------------------------------------------------------------- Tue Feb 4 12:44:31 CET 2003 - [email protected] - ntp-4.1.1.broadcastclient.diff replaced by ntp1.bk.patch/ntp2.bk.patch. A more secure soloution, which will most probabely go into ntp-4.1.2. ------------------------------------------------------------------- Wed Jan 29 14:15:19 CET 2003 - [email protected] - Add sysconfig meta data [Bug #22705] ------------------------------------------------------------------- Wed Jan 15 12:49:27 CET 2003 - [email protected] - moved logrotate config here ------------------------------------------------------------------- Wed Jan 15 12:20:55 CET 2003 - [email protected] - Added ntp-4.1.1.broadcastclient.diff to enable broadcastclient mode, unless AUTOKEY is defined (which is off by default). Due to broken interface code, broadcastclient together with AUTOKEY does not work on Linux. [#22253] ------------------------------------------------------------------- Tue Dec 10 13:36:07 CET 2002 - [email protected] - Corrected patch ntp-4.1.1-noroot.patch. removed : after x for optionlist [#21826] ------------------------------------------------------------------- Mon Nov 11 17:00:26 CET 2002 - [email protected] - fixed typo in /etc/sysconfig/xntp comment. (#21688) ------------------------------------------------------------------- Mon Sep 9 12:47:35 CEST 2002 - [email protected] - ntp.drift is moved, adjust specfile completely, and move it to the new place from /etc in case of update. [#19113] ------------------------------------------------------------------- Wed Aug 28 05:52:17 CEST 2002 - [email protected] - Added insserv, fillup to PreReq ------------------------------------------------------------------- Fri Aug 9 10:28:00 CEST 2002 - [email protected] - added patch to make xntpd drop root privileges and chroot - added XNTPD_OPTIONS to sysconfig file and rc script; set XNTPD_OPTIONS="-U ntp" initially - added /var/lib/ntp owned by user ntp, and moved ntp.drift there. ------------------------------------------------------------------- Wed Jun 26 01:21:48 CEST 2002 - [email protected] - fix directory permissions ------------------------------------------------------------------- Mon May 27 18:51:54 CEST 2002 - [email protected] - Fixed segfault in ntpdate if no server suitable for synchronization found (#15589) ------------------------------------------------------------------- Fri Apr 5 14:02:30 CEST 2002 - [email protected] - Overworked documentation in doc/packages/xntp (#15052) ------------------------------------------------------------------- Sun Mar 10 23:03:36 CET 2002 - [email protected] - Update to ntp-4.1.1 / NTP-FAQ-3.4 - SuSE specific files formerly created by SuSE-Config.diff are now shipped via ntp-4.1.1.SuSE-Config.tar.gz. - Removed parts of ntpdate_overflow.diff, that are now included in the official source. - Added new argument 'ntptimeset' to rcxntpd. If no ntpd is running, 'rcxntpd ntptimeset' evaluates XNTPD_INITIAL_NTPDATE from /etc/sysconfig/xntp, and tries to set time and date via ntpdate, the same way as it is done at 'rcxntpd start'. But no ntpd is started. This might be usefull if the machine isn't permanently connected to the internet. "AUTO" value in XNTPD_INITIAL_NTPDATE requires parsing /etc/ntpd.conf, so 'ntpadte $XNTPD_INITIAL_NTPDATE' after dialup might not work. - Added manual page to package xntpd, telling that documentation is available in HTML only, and located in package xntp-doc. (#14338) ------------------------------------------------------------------- Mon Feb 11 16:57:52 CET 2002 - [email protected] - Evaluation of XNTPD_INITIAL_NTPDATE from /etc/sysconfig/xntp was changed. A space-separated list of ntp servers to query for current time and date before the local xntpd is started, is still supported. Furthermore you may now set XNTPD_INITIAL_NTPDATE="AUTO", to query ALL servers and peers configured in /etc/ntpd.conf. You may as well restrict the total number of servers to be queried at startup by setting XNTPD_INITIAL_NTPDATE="AUTO-{NUMBER}". The new default value for XNTPD_INITIAL_NTPDATE is "AUTO-2", which will query only the first two servers listed in /etc/ntpd.conf. ------------------------------------------------------------------- Mon Jan 7 17:19:09 CET 2002 - [email protected] - Fixed example scripts referencing nslookup in wrong path (#12667) - Fillup template renamed to sysconfig.xntp. Let init script source /etc/sysconfig/xntp instead of /etc/rc.config. (#12748) ------------------------------------------------------------------- Mon Dec 17 14:25:27 CET 2001 - [email protected] - ntpdate_overflow.diff: Brute force patch to handle condition where systemtime is more than MAX_INT32 seconds in the past. Due to the limited range of an INT32, the computed offset is negative, although systemtime is in the past. In this situation the measured offset must be interpreted as UNSIGNED_INT32, and the systemtime has to be adjusted in two steps, as we can't step more than MAX_INT32 seconds at once. Need for this patch arises on newer macs, which reset the time to 1904 after a hard crash or when the powerbook battery was off for a while.(#12620) ------------------------------------------------------------------- Fri Dec 14 01:53:46 CET 2001 - [email protected] - removed START_XNTPD ------------------------------------------------------------------- Thu Dec 13 10:10:05 CET 2001 - [email protected] - ntpdate_overflow.diff: ntpdate failed, if systemtime is a long way off. I.e. more than MAX_INT32 seconds (presently before Nov 1933) or closer to this limit than to the actual time. In both cases ntpdate tried to adjust the time to Nov 1933. This succeeded for systemtimes before Nov 1933 and failed if ntpdate tried to set the time back. The patch does not enable ntpdate to set the correct date, if the systemtime is before the limit, but ntpdate will report an error and fail, instead of setting the systemtime to Nov 1933. Any systemtime after this limit will be set correctly. (#12620) ------------------------------------------------------------------- Fri Sep 21 11:23:07 CEST 2001 - [email protected] - NTP-FAQ in xntp-doc updated to NTP-FAQ-3.2. ------------------------------------------------------------------- Wed Aug 22 18:54:04 CEST 2001 - [email protected] - Removed the glibc22.patch (sparc/s390 only). Better fix configure, than trying to patch config.h afterwards :( ------------------------------------------------------------------- Wed Aug 22 16:37:58 CEST 2001 - [email protected] - Update to ntp-4.1.0 The latest NTPv4 'ntpdc' does not work with previous versions of ntpd and previous versions of 'ntpdc' do not work with latest ntpd. This situation is regrettable and may be fixed in future; however, it is necessary in order for the autokey function to retrieve canonical names and certificates from directory services such as Secure DNS. The standard NTP query program 'ntpq' is not affected by this. - Previously applied bugfix/security patches are obsolete. - ntpdate called from /etc/init.d/xntpd now uses an unprivileged port for outgoing packets. Might be we have to synchronise with hosts beyond a firewall, that that blocks incoming traffic to privileged ports. - /etc/init.d/xntpd is now LSB compliant (#9114) - Subpackage xntpdoc was renamed to xntp-doc. - NTP-FAQ in xntp-doc updated to NTP-FAQ-3.1. ------------------------------------------------------------------- Thu Jun 14 20:41:02 CEST 2001 - [email protected] - remove lx_sus22 from neededforbuild, not on s390x and obsolete ------------------------------------------------------------------- Tue Jun 12 16:14:04 UTC 2001 - [email protected] - enable sparc and alpha changes on s390x too ------------------------------------------------------------------- Tue Apr 17 16:18:01 CEST 2001 - [email protected] - Remove extra version from sub-package ------------------------------------------------------------------- Fri Apr 6 11:09:04 CEST 2001 - [email protected] - fixed to build ------------------------------------------------------------------- Thu Apr 5 19:40:10 MEST 2001 - [email protected] - fix last change because the patch against ntpd/ntp_control.c that I supplied was wrong. ------------------------------------------------------------------- Thu Apr 5 14:16:38 CEST 2001 - [email protected] - incorporated sparc patches (Tue Feb [email protected]): Add some ugly hacks to work on SPARC - incorporated alpha patches (Wed Feb [email protected]): compiling with -O0 on Alpha - added root-hole patch to fix possible exploit in ntpd/ntp_control.c ------------------------------------------------------------------- Thu Jan 4 18:56:20 CET 2001 - [email protected] - Add missing period to README.SuSE and clarify it a bit. ------------------------------------------------------------------- Mon Dec 4 12:39:19 CET 2000 - [email protected] - update to NTP-FAQ-2.5 ------------------------------------------------------------------- Tue Nov 28 17:36:37 CET 2000 - [email protected] - startscript fixed ------------------------------------------------------------------- Mon Jul 10 17:56:09 CEST 2000 - [email protected] - update to NTP-FAQ-2.1 ------------------------------------------------------------------- Tue Apr 4 02:15:05 CEST 2000 - [email protected] - added suse_update_config macro ------------------------------------------------------------------- Wed Mar 8 12:42:37 CET 2000 - [email protected] - update to NTP-FAQ-1.7 ------------------------------------------------------------------- Sun Feb 27 23:03:39 CET 2000 - [email protected] - renamed subpackage xntp-doc to xntpdoc ------------------------------------------------------------------- Fri Feb 25 15:55:51 CET 2000 - [email protected] - update to 4.0.99f - Html documentation and NTP-FAQ have been moved into a separate package: xntp-doc ------------------------------------------------------------------- Mon Nov 8 15:27:21 CET 1999 - [email protected] - update to 4.0.98d ------------------------------------------------------------------- Mon Sep 13 17:23:57 CEST 1999 - [email protected] - ran old prepare_spec on spec file to switch to new prepare_spec. ------------------------------------------------------------------- Thu Sep 9 12:15:28 CEST 1999 - [email protected] - fixed call of Check at the end of %install section ------------------------------------------------------------------- Wed Jul 14 16:06:23 MEST 1999 - [email protected] - call Check ------------------------------------------------------------------- Wed Jul 14 15:50:58 MEST 1999 - [email protected] - added some hints for radio clocks in ntp.conf ------------------------------------------------------------------- Thu Jul 8 01:36:47 MEST 1999 - [email protected] - update to ntp-4.0.93a - still need to work on some scripts - ntptime was removed from package; currently not supported under Linux ------------------------------------------------------------------- Wed Mar 31 04:31:27 MEST 1999 - [email protected] - update to ntp-4.0.92c ------------------------------------------------------------------- Fri Mar 26 11:07:25 MET 1999 - [email protected] - fixed spec-naming ------------------------------------------------------------------- Wed Mar 24 22:30:00 MET 1999 - [email protected] - update to 3.5.93e - ntptime now builds on glibc - Additional patch from Ulrich Windl for DCF77 receiver ------------------------------------------------------------------- Thu Jan 14 16:24:50 MET 1999 - [email protected] - All references to '/lobal/bin/perl' below scripts/ changed to '/usr/bin/perl'. ------------------------------------------------------------------- Thu Dec 10 16:52:26 MET 1998 - [email protected] - 2 new variables for rc.config: # # Usually it's a good idea to get the current time and date # from some other ntp server, before xntpd is started. # If we should do so, provide a space-separated list of # ntp servers to query. # XNTPD_INITIAL_NTPDATE="" # # This allows you to alter the kernel TICK variable. # # WARNING: YOU MUST NOT CHANGE THIS VARIABLE! # # Believe me, it won't help to solve any problem you have # if you set it. On the contrary, you will run into trouble! # # It's just here for those few, who know why they do not # believe me ;) # XNTPD_KERNEL_TICK="" - updated rc-script ------------------------------------------------------------------- Mon Dec 7 15:49:21 MET 1998 - [email protected] - updated rc-script - pack ntptime for libc5 ------------------------------------------------------------------- Tue Oct 6 15:06:29 MEST 1998 - [email protected] - ntptime does not get built on glibc ------------------------------------------------------------------- Thu Sep 17 15:48:28 MEST 1998 - [email protected] - ntp_machine.h: GLIBC has sys/stropts.h but not sys/streams.h ! ------------------------------------------------------------------- Tue Jul 21 14:33:14 MEST 1998 - [email protected] - Win and NT documentation removed ------------------------------------------------------------------- Fri Jun 26 13:47:18 MEST 1998 - [email protected] - update to 3.5.93c - changed /sbin/init.d/xntp: reload/restart option. - added symlink /usr/sbin/rcxntpd -> ../../sbin/init.d/xntpd - changed /etc/ntp.conf: more comments+examples; default loging to /var/log/ntp - specfile & build: - using 'BuildRoot: /tmp/xntp' - Makefile.Linux removed - using dir conf.SuSE in source tree for scripts provided by S.u.S.E. (default ntp.conf, init.d/xntpd, fillup-templates..) - added /etc/drift and /var/log/ntp as %ghost ------------------------------------------------------------------- Wed Jun 10 14:53:21 MEST 1998 - [email protected] - Makefile.Linux: configure option --enable-step-slew removed. step-slew quite often seems to prevent xntpd from adjusting the system time correctly. ------------------------------------------------------------------- Tue Mar 3 16:48:07 MET 1998 - [email protected] - update to 3-5.92 ------------------------------------------------------------------- Mon Nov 24 14:02:57 MET 1997 - [email protected] - changed /local/bin/perl to /usr/bin/perl in scripts/monitoring and in scripts/support/bin/monl ------------------------------------------------------------------- Wed Nov 19 13:05:42 MET 1997 - [email protected] - move html-docu into subdirectory and add some support scripts ------------------------------------------------------------------- Mon Oct 27 14:33:28 MET 1997 - [email protected] - update to version 3-5.91 - change some HAVE_TERMIOS to HAVE_TERMIOS_H ------------------------------------------------------------------- Wed Jun 25 11:28:39 MEST 1997 - [email protected] - update to version 3-5.90.2 ------------------------------------------------------------------- Sun Jun 1 21:35:29 CEST 1997 - [email protected] - moved fillup stuff to var/adm/fillup-templates ------------------------------------------------------------------- Sun Feb 2 19:42:46 CET 1997 - [email protected] - update to new version 3.5-89 - better config files ------------------------------------------------------------------- Tue Nov 26 20:15:03 CET 1996 - [email protected] - update to version 3-5.86.12.2 - slightly better config file ------------------------------------------------------------------- Wed Nov 6 00:13:26 CET 1996 - [email protected] - update to new version 3-5.86.9 - add RAWDCF support ------------------------------------------------------------------- Fri Sep 6 00:14:51 MET DST 1996 - [email protected] - fillup added - /sbin/init.d start-scripts
