~ubuntu-branches/ubuntu/trusty/ntp/trusty-proposed : changes

~ubuntu-branches/ubuntu/trusty/ntp/trusty-proposed » Changes from revision 71

From Revision 71 to 52

Rev	Summary	Authors	Tags	Date
71	* Fix use-after-free in routing socket code (LP: #1481388) * Fix use-after-free in routing socket code (LP: #1481388) - debian/patches/use-after-free-in-routing-socket.patch fix logic in ntpd/ntp_io.c * Fix to ignore ENOBUFS on routing netlink socket - debian/patches/ignore-ENOBUFS-on-routing-netlink-socket.patch fix logic in ntpd/ntp_io.c	Eric Desrochers	1:4.2.6.p5+dfsg-3ubuntu2.14.04.4	8 years ago
70	* SECURITY UPDATE: symmetric key unauthenticated packet MITM... * SECURITY UPDATE: symmetric key unauthenticated packet MITM attack - debian/patches/CVE-2015-1798.patch: reject packets without MAC in ntpd/ntp_proto.c. - CVE-2015-1798 * SECURITY UPDATE: symmetric association DoS attack - debian/patches/CVE-2015-1799.patch: don't update state variables when authentication fails in ntpd/ntp_proto.c. - CVE-2015-1799 * SECURITY UPDATE: ntp-keygen infinite loop or lack of randonmess on big endian platforms - debian/patches/ntp-keygen-endless-loop.patch: fix logic in util/ntp-keygen.c. - CVE number pending	Marc Deslauriers	1:4.2.6.p5+dfsg-3ubuntu2.14.04.3	9 years ago
69	* SECURITY UPDATE: denial of service and possible info leaka... * SECURITY UPDATE: denial of service and possible info leakage via extension fields - debian/patches/CVE-2014-9297.patch: properly check lengths in ntpd/ntp_crypto.c, ntpd/ntp_proto.c. - CVE-2014-9297 * SECURITY UPDATE: IPv6 ACL bypass - debian/patches/CVE-2014-9298.patch: check for spoofed ::1 in ntpd/ntp_io.c. - CVE-2014-9298	Marc Deslauriers	1:4.2.6.p5+dfsg-3ubuntu2.14.04.2	9 years ago
68	* SECURITY UPDATE: weak default key in config_auth() * SECURITY UPDATE: weak default key in config_auth() - debian/patches/CVE-2014-9293.patch: use openssl for random key in ntpd/ntp_config.c, ntpd/ntpd.c. - CVE-2014-9293 * SECURITY UPDATE: non-cryptographic random number generator with weak seed used by ntp-keygen to generate symmetric keys - debian/patches/CVE-2014-9294.patch: use openssl for random key in include/ntp_random.h, libntp/ntp_random.c, util/ntp-keygen.c. - CVE-2014-9294 * SECURITY UPDATE: buffer overflows in crypto_recv(), ctl_putdata(), configure() - debian/patches/CVE-2014-9295.patch: check lengths in ntpd/ntp_control.c, ntpd/ntp_crypto.c. - CVE-2014-9295 * SECURITY UPDATE: missing return on error in receive() - debian/patches/CVE-2015-9296.patch: add missing return in ntpd/ntp_proto.c. - CVE-2014-9296	Marc Deslauriers	1:4.2.6.p5+dfsg-3ubuntu2.14.04.1	9 years ago
67	debian/apparmor-profile: fix spurious noisy denials (LP: #12... debian/apparmor-profile: fix spurious noisy denials (LP: #1237508)	Jamie Strandboge	1:4.2.6.p5+dfsg-3ubuntu2	10 years ago
66	* Merge from Debian testing to regain crypto support (LP: #1... * Merge from Debian testing to regain crypto support (LP: #1236065). Remaining changes: + debian/ntp.conf, debian/ntpdate.default: Change default server to ntp.ubuntu.com. + debian/ntpdate.if-up: Stop ntp before running ntpdate when an interface comes up, then start again afterwards. + debian/ntp.init, debian/rules: Only stop when entering single user mode. + Add enforcing AppArmor profile: - debian/control: Add Conflicts/Replaces on apparmor-profiles. - debian/control: Add Suggests on apparmor. - debian/ntp.dirs: Add apparmor directories. - debian/ntp.preinst: Force complain on certain upgrades. - debian/ntp.postinst: Reload apparmor profile. - debian/ntp.postrm: Remove the force-complain file. - add debian/apparmor-profile*. - debian/rules: install apparmor-profile and apparmor-profile.tunable. - debian/README.Debian: Add note on AppArmor. + debian/{control,rules}: Add and enable hardened build for PIE. + debian/rules, debian/ntp.dirs, debian/source_ntp.py: Add apport hook. + debian/ntpdate-debian: Disregard empty ntp.conf files. + debian/ntp.preinst: Remove empty /etc/ntp.conf on fresh intallation. + debian/ntpdate.if-up: Fix interaction with openntpd. + debian/source_ntp.py: Add filter on AppArmor profile names to prevent false positives from denials originating in other packages. + debian/rules: Update config.{guess,sub} for AArch64.	Tyler Hicks	1:4.2.6.p5+dfsg-3ubuntu1	10 years ago
65	Update config.{guess,sub} for AArch64. Update config.{guess,sub} for AArch64.	Matthias Klose	1:4.2.6.p5+dfsg-2ubuntu3	10 years ago
64	debian/apparmor-profile: Add /var/log/ntpstats/protostats* (... debian/apparmor-profile: Add /var/log/ntpstats/protostats* (LP: #1195898)	Jamie Strandboge	1:4.2.6.p5+dfsg-2ubuntu2	10 years ago
63	* New upstream version, fixing build failure in raring. * New upstream version, fixing build failure in raring. * Merge with Debian; remaining changes: + debian/ntp.conf, debian/ntpdate.default: Change default server to ntp.ubuntu.com. + debian/ntpdate.ifup: Stop ntp before running ntpdate when an interface comes up, then start again afterwards. + debian/ntp.init, debian/rules: Only stop when entering single user mode. + Add enforcing AppArmor profile: - debian/control: Add Conflicts/Replaces on apparmor-profiles. - debian/control: Add Suggests on apparmor. - debian/ntp.dirs: Add apparmor directories. - debian/ntp.preinst: Force complain on certain upgrades. - debian/ntp.postinst: Reload apparmor profile. - debian/ntp.postrm: Remove the force-complain file. - add debian/apparmor-profile*. - debian/rules: install apparmor-profile and apparmor-profile.tunable. - debian/README.Debian: Add note on AppArmor. + debian/{control,rules}: Add and enable hardened build for PIE. + debian/apparmor-profile: Adjust location of drift files. + debian/rules, debian/ntp.dirs, debian/source_ntp.py: Add apport hook. + debian/ntpdate-debian: Disregard empty ntp.conf files. + debian/ntp.preinst: Remove empty /etc/ntp.conf on fresh intallation. + debian/ntpdate.ifup: Fix interaction with openntpd. + debian/source_ntp.py: Add filter on AppArmor profile names to prevent false positives from denials originating in other packages. + debian/apparmor-profile: Add samba4 ntp signing socket to ntpd apparmor profile. + debian/apparmor-profile: adjust for IPv6.	Matthias Klose	1:4.2.6.p5+dfsg-2ubuntu1	11 years ago
62	debian/source_ntp.py: add filter on AppArmor profile names t... debian/source_ntp.py: add filter on AppArmor profile names to prevent false positives from denials originating in other packages.	Marc Deslauriers	1:4.2.6.p3+dfsg-1ubuntu5	11 years ago
61	Re-enable crypto support by pointing openssl libdir to multi... Re-enable crypto support by pointing openssl libdir to multiarch dir, change backported from Debian, thanks Yves-Alexis Perez (lp: #998403)	Sebastien Bacher	1:4.2.6.p3+dfsg-1ubuntu4	11 years ago
60	* debian/apparmor-profile: Add samba4 ntp signing socket to ... * debian/apparmor-profile: Add samba4 ntp signing socket to ntpd apparmor profile (LP: #930266) * debian/control: Build-Depends on dh-apparmor	Jamie Strandboge	1:4.2.6.p3+dfsg-1ubuntu3	12 years ago
59	debian/apparmor-profile: adjust for IPv6 (LP: #892332) debian/apparmor-profile: adjust for IPv6 (LP: #892332)	Jamie Strandboge	1:4.2.6.p3+dfsg-1ubuntu2	12 years ago
58	* Merge from debian unstable, remaining changes are: * Merge from debian unstable, remaining changes are: + debian/ntp.conf, debian/ntpdate.default: Change default server to ntp.ubuntu.com. + debian/ntpdate.ifup: Stop ntp before running ntpdate when an interface comes up, then start again afterwards. + debian/ntp.init, debian/rules: Only stop when entering single user mode. + Add enforcing AppArmor profile (LP: #382905): - debian/control: add Conflicts/Replaces on apparmor-profiles < 2.3.1+1403-0ubuntu10 (since we are now shipping usr.sbin.ntpd) and apparmor < 2.3.1+1403-0ubuntu10 (since we are now shipping tunables/ntpd) - debian/control: add Suggests on apparmor - debian/ntp.dirs: add apparmor directories - debian/ntp.preinst: force complain on certain upgrades - debian/ntp.postinst: reload apparmor profile - debian/ntp.postrm: remove the force-complain file - add debian/apparmor-profile* - debian/rules: install apparmor-profile and apparmor-profile.tunable - debian/README.Debian: add note on AppArmor + debian/{control,rules}: add and enable hardened build for PIE (Debian bug 542721). + debian/apparmor-profile: adjust location of drift files (LP: #456308) + debian/rules, debian/ntp.dirs, debian/source_ntp.py: Add apport hook. + debian/ntpdate-debian: Disregard empty ntp.conf files. (LP: #83604) + debian/ntp.preinst: Remove empty /etc/ntp.conf on fresh intallation, to work around the system-tools-backends part of LP #83604. + debian/ntpdate.ifup: Fix interaction with openntpd. (LP: #877210) + Dropped: - ntpdate-accept-same-timestamp-replies.patch: Accepted upstream	Chuck Short	1:4.2.6.p3+dfsg-1ubuntu1	12 years ago
57	debian/ntpdate.if-up: Fix interaction with openntpd, LP: #87... debian/ntpdate.if-up: Fix interaction with openntpd, LP: #872210	Reinhard Tartler	1:4.2.6.p2+dfsg-1ubuntu13	12 years ago
56	debian/apparmor-profile: also allow access to debian/apparmor-profile: also allow access to /var/log/ntpstats/rawstats*	Jamie Strandboge	1:4.2.6.p2+dfsg-1ubuntu12	12 years ago
55	* debian/apparmor-profile: allow sys_nice for -N option to w... * debian/apparmor-profile: allow sys_nice for -N option to work. More work is needed to make ntpd start niced, so not auto-closing the bug. - LP: 229632	Jamie Strandboge	1:4.2.6.p2+dfsg-1ubuntu11	12 years ago
54	debian/source_ntp.py: use new apport MAC function instead of... debian/source_ntp.py: use new apport MAC function instead of parsing and attaching AppArmor events here.	Marc Deslauriers	1:4.2.6.p2+dfsg-1ubuntu10	12 years ago
53	debian/apparmor-profile: Allow /var/run and /run. (LP: #8102... debian/apparmor-profile: Allow /var/run and /run. (LP: #810270)	Martin Pitt	1:4.2.6.p2+dfsg-1ubuntu9	12 years ago
52	debian/patches/ntpdate-accept-same-timestamp-replies.patch: debian/patches/ntpdate-accept-same-timestamp-replies.patch: Resolving regression where ntpdate ignores replies from some ntp servers where recieve and transmit timestamps are equal. Patch cherry picked from upstream commit. (LP: #787551)	Dave Walker (Daviey)	1:4.2.6.p2+dfsg-1ubuntu8	12 years ago

Older »