~ubuntu-branches/debian/squeeze/ntp/squeeze-201010051545

« back to all changes in this revision

Viewing changes to debian/ntpdate-debian

  • Committer: Bazaar Package Importer
  • Author(s): Kurt Roeckx
  • Date: 2009-01-05 21:10:03 UTC
  • mfrom: (1.2.4 upstream)
  • Revision ID: james.westby@ubuntu.com-20090105211003-mh6zc3um4k1uhsj7
Tags: 1:4.2.4p4+dfsg-8
It did not properly check the return value of EVP_VerifyFinal
which results in an malformed DSA signature being treated as
a good signature rather than as an error.  (CVE-2009-0021)

Show diffs side-by-side

added added

removed removed

Lines of Context:
 
1
#!/bin/sh
 
2
 
 
3
set -e
 
4
 
 
5
if [ -r /etc/default/ntpdate ]; then
 
6
        . /etc/default/ntpdate
 
7
fi
 
8
 
 
9
if [ "$NTPDATE_USE_NTP_CONF" = yes ]; then
 
10
        for f in /etc/ntp.conf.dhcp /etc/ntp.conf /etc/openntpd/ntpd.conf; do
 
11
                if [ -r "$f" ]; then
 
12
                        file=$f
 
13
                        break
 
14
                fi
 
15
        done
 
16
        if [ -n "$file" ]; then
 
17
                NTPSERVERS=$(sed -rne 's/^(servers?|peer) ([-_.:[:alnum:]]+).*$/\2/p' "$file" | grep -v '^127\.127\.') || [ $? -le 1 ]
 
18
        fi
 
19
elif [ -r /etc/default/ntpdate.dhcp ]; then
 
20
        . /etc/default/ntpdate.dhcp
 
21
fi
 
22
 
 
23
exec /usr/sbin/ntpdate $NTPOPTIONS "$@" $NTPSERVERS