Package: ntp / 1:4.2.6.p2+dfsg-1+deb6u4

Metadata

Package Version Patches format
ntp 1:4.2.6.p2+dfsg-1+deb6u4 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
dfsg.patch | (download)

Makefile.am | 4 0 + 4 - 0 !
adjtimed/adjtimed.c | 2 0 + 2 - 0 !
configure.ac | 50 24 + 26 - 0 !
include/Makefile.am | 4 0 + 4 - 0 !
libntp/Makefile.am | 1 0 + 1 - 0 !
libparse/Makefile.am | 2 0 + 2 - 0 !
ntpd/Makefile.am | 1 0 + 1 - 0 !
scripts/Makefile.am | 1 0 + 1 - 0 !
8 files changed, 24 insertions(+), 41 deletions(-)

 make the package compile with non dfsg compatible parts removed.
includes.patch | (download)

include/ntp_control.h | 4 4 + 0 - 0 !
include/ntpd.h | 1 1 + 0 - 0 !
2 files changed, 5 insertions(+)

---
ntpdate ipv6.patch | (download)

ntpdate/ntpdate.c | 3 1 + 2 - 0 !
1 file changed, 1 insertion(+), 2 deletions(-)

---
ntpd linux caps runtime.patch | (download)

ntpd/ntpd.c | 23 23 + 0 - 0 !
1 file changed, 23 insertions(+)

 runtime check for capabilities
Bug: http://bugs.ntp.org/1433
Bug-Debian: http://bugs.debian.org/282941
Bug-Debian: http://bugs.debian.org/298059

add runtime check whether the kernel really supports capabilities; do
not drop root privileges if not


ntpd linux caps inheritable.patch | (download)

ntpd/ntpd.c | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 do not set cap_sys_time as inheritable
Bug: http://bugs.ntp.org/1432
Bug-Debian: http://bugs.debian.org/282941
Bug-Debian: http://bugs.debian.org/298059

ntpd ni maxhost.patch | (download)

ntpd/ntp_intres.c | 8 4 + 4 - 0 !
1 file changed, 4 insertions(+), 4 deletions(-)

---
openssl disable check.patch | (download)

libntp/ssl_init.c | 9 0 + 9 - 0 !
1 file changed, 9 deletions(-)

---
libedit.patch | (download)

libntp/ntp_lineedit.c | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

---
autotools.patch | (download)

Makefile.in | 43 28 + 15 - 0 !
aclocal.m4 | 6175 8 + 6167 - 0 !
adjtimed/Makefile.in | 24 19 + 5 - 0 !
clockstuff/Makefile.in | 24 19 + 5 - 0 !
config.h.in | 10 4 + 6 - 0 !
configure | 18441 8689 + 9752 - 0 !
include/Makefile.in | 32 21 + 11 - 0 !
include/isc/Makefile.in | 24 19 + 5 - 0 !
kernel/Makefile.in | 28 21 + 7 - 0 !
kernel/sys/Makefile.in | 24 19 + 5 - 0 !
libntp/Makefile.in | 37 24 + 13 - 0 !
libopts/Makefile.in | 24 19 + 5 - 0 !
libparse/Makefile.in | 41 25 + 16 - 0 !
ltmain.sh | 12923 7403 + 5520 - 0 !
m4/libtool.m4 | 7377 7377 + 0 - 0 !
m4/ltoptions.m4 | 368 368 + 0 - 0 !
m4/ltsugar.m4 | 123 123 + 0 - 0 !
m4/ltversion.m4 | 23 23 + 0 - 0 !
m4/lt~obsolete.m4 | 92 92 + 0 - 0 !
ntpd/Makefile.in | 44 28 + 16 - 0 !
ntpdate/Makefile.in | 24 19 + 5 - 0 !
ntpdc/Makefile.in | 24 19 + 5 - 0 !
ntpq/Makefile.in | 24 19 + 5 - 0 !
parseutil/Makefile.in | 24 19 + 5 - 0 !
scripts/Makefile.in | 33 22 + 11 - 0 !
25 files changed, 24427 insertions(+), 21579 deletions(-)

 regenerate auto* because we modified some of the auto generated files.
mod_nano.patch | (download)

include/ntp_syscall.h | 8 8 + 0 - 0 !
1 file changed, 8 insertions(+)

---
nanokernel status.patch | (download)

ntpd/ntp_loopfilter.c | 57 28 + 29 - 0 !
1 file changed, 28 insertions(+), 29 deletions(-)

 detect that the kernel has nano support or not.
Bug: https://support.ntp.org/bugs/show_bug.cgi?id=888

The code assumed that if STA_NANO is defined the kernel has nano
support.  But on Linux, only kernel 2.6.26 and later have nano
kernel support.  If run on an older kernel, ntpd does not behave
properly because all values it sends to the kernel are
off by a factor 1000.

When the nano kernel was designed there was logic added to
detect it.  But this got removed from the ntpd binary.  This
adds the code again like it was in 4.2.0.

ntp 4.2.6p5 cve 2014 9293.patch | (download)

ntpd/ntp_config.c | 11 7 + 4 - 0 !
ntpd/ntpd.c | 1 1 + 0 - 0 !
2 files changed, 8 insertions(+), 4 deletions(-)

---
ntp 4.2.6p5 cve 2014 9294.patch | (download)

include/ntp_random.h | 3 3 + 0 - 0 !
libntp/ntp_random.c | 60 60 + 0 - 0 !
util/ntp-keygen.c | 11 10 + 1 - 0 !
3 files changed, 73 insertions(+), 1 deletion(-)

---
ntp 4.2.6p5 cve 2014 9295.patch | (download)

ntpd/ntp_control.c | 31 30 + 1 - 0 !
ntpd/ntp_crypto.c | 15 12 + 3 - 0 !
2 files changed, 42 insertions(+), 4 deletions(-)

---
ntp 4.2.6p5 cve 2014 9296.patch | (download)

ntpd/ntp_proto.c | 1 1 + 0 - 0 !
1 file changed, 1 insertion(+)

---
CVE 2014 9750.patch | (download)

ntpd/ntp_crypto.c | 116 73 + 43 - 0 !
ntpd/ntp_proto.c | 10 9 + 1 - 0 !
2 files changed, 82 insertions(+), 44 deletions(-)

---
CVE 2014 9751.patch | (download)

ntpd/ntp_io.c | 23 23 + 0 - 0 !
1 file changed, 23 insertions(+)

---
CVE 2015 1798.patch | (download)

ntpd/ntp_proto.c | 10 6 + 4 - 0 !
1 file changed, 6 insertions(+), 4 deletions(-)

---
CVE 2015 1799.patch | (download)

ntpd/ntp_proto.c | 20 10 + 10 - 0 !
1 file changed, 10 insertions(+), 10 deletions(-)

---
CVE 2015 3405.patch | (download)

util/ntp-keygen.c | 8 4 + 4 - 0 !
1 file changed, 4 insertions(+), 4 deletions(-)

---
CVE 2015 7850.patch | (download)

include/ntp_stdlib.h | 2 2 + 0 - 0 !
include/ntp_syslog.h | 1 1 + 0 - 0 !
libntp/authreadkeys.c | 89 72 + 17 - 0 !
libntp/msyslog.c | 12 12 + 0 - 0 !
4 files changed, 87 insertions(+), 17 deletions(-)

---
CVE 2015 7704.patch | (download)

ntpd/ntp_proto.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

---
CVE 2015 7701.patch | (download)

ntpd/ntp_crypto.c | 1 1 + 0 - 0 !
1 file changed, 1 insertion(+)

---
CVE 2015 7852.patch | (download)

ntpq/ntpq.c | 7 6 + 1 - 0 !
1 file changed, 6 insertions(+), 1 deletion(-)

---
CVE 2015 7851.patch | (download)

ntpd/ntp_control.c | 26 25 + 1 - 0 !
1 file changed, 25 insertions(+), 1 deletion(-)

---
CVE 2015 7855.patch | (download)

libntp/decodenetnum.c | 5 4 + 1 - 0 !
1 file changed, 4 insertions(+), 1 deletion(-)

---
CVE 2015 7871.patch | (download)

ntpd/ntp_proto.c | 18 18 + 0 - 0 !
1 file changed, 18 insertions(+)

---
ntp 4.2.6p2 cve 2015 5146.patch | (download)

ntpd/ntp_control.c | 77 57 + 20 - 0 !
1 file changed, 57 insertions(+), 20 deletions(-)

---
ntp 4.2.6p5 cve 2015 5194.patch | (download)

ntpd/ntp_parser.y | 24 17 + 7 - 0 !
1 file changed, 17 insertions(+), 7 deletions(-)

---
ntp 4.2.6p5 cve 2015 5195.patch | (download)

ntpd/ntp_config.c | 14 14 + 0 - 0 !
1 file changed, 14 insertions(+)

---
ntp 4.2.6p2 cve 2015 7703.patch | (download)

ntpd/ntp_parser.c | 173 100 + 73 - 0 !
ntpd/ntp_parser.y | 37 32 + 5 - 0 !
2 files changed, 132 insertions(+), 78 deletions(-)

 [bug 2902] configuration directives "pidfile" and "driftfile" should
 be local-only.
ntp 4.2.6p5 cve 2015 5219.patch | (download)

include/ntp.h | 5 2 + 3 - 0 !
1 file changed, 2 insertions(+), 3 deletions(-)

---
ntp 4.2.6p5 cve 2015 5300.patch | (download)

ntpd/ntp_loopfilter.c | 1 1 + 0 - 0 !
1 file changed, 1 insertion(+)

---
ntp 4.2.6p5 cve 2015 7691_7962_7702.patch | (download)

ntpd/ntp_crypto.c | 103 77 + 26 - 0 !
1 file changed, 77 insertions(+), 26 deletions(-)

---