Summary: The NTP daemon and utilities Name: ntp Version: 4.2.6p5 Release: 29%{?dist} # primary license (COPYRIGHT) : MIT # ElectricFence/ (not used) : GPLv2 # kernel/sys/ppsclock.h (not used) : BSD with advertising # include/ntif.h (not used) : BSD # include/rsa_md5.h : BSD with advertising # include/ntp_rfc2553.h : BSD with advertising # lib/isc/commandline.c (not used) : BSD with advertising # lib/isc/inet_aton.c (not used) : BSD with advertising # lib/isc/strtoul.c (not used) : BSD with advertising # lib/isc/unix/file.c : BSD with advertising # lib/isc/inet_aton.c (not used) : BSD with advertising # libntp/mktime.c : BSD with advertising # libntp/ntp_random.c : BSD with advertising # libntp/memmove.c : BSD with advertising # libntp/ntp_rfc2553.c : BSD with advertising # libntp/adjtimex.c (not used) : BSD # libparse/ : BSD # ntpd/refclock_jjy.c: MIT # ntpd/refclock_oncore.c : BEERWARE License (aka, Public Domain) # ntpd/refclock_palisade.c : BSD with advertising # ntpd/refclock_jupiter.c : BSD with advertising # ntpd/refclock_mx4200.c : BSD with advertising # ntpd/refclock_palisade.h : BSD with advertising # ntpstat-0.2/ : GPLv2 # sntp/libopts/ (not used) : BSD or GPLv3+ # util/ansi2knr.c (not used) : GPL+ License: (MIT and BSD and BSD with advertising) and GPLv2 Group: System Environment/Daemons Source0: http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2/ntp-%{version}.tar.gz Source1: ntp.conf Source2: ntp.keys Source4: ntpd.sysconfig Source5: https://github.com/mlichvar/ntpstat/archive/0.5/ntpstat-0.5.tar.gz Source6: ntp.step-tickers Source7: ntpdate.wrapper Source8: ntp.cryptopw Source9: ntpdate.sysconfig Source10: ntp.dhclient Source12: ntpd.service Source13: ntpdate.service Source14: ntp-wait.service Source15: sntp.service Source16: sntp.sysconfig # ntpbz #802 Patch1: ntp-4.2.6p1-sleep.patch # add support for dropping root to ntpdate Patch2: ntp-4.2.6p4-droproot.patch # ntpbz #779 Patch3: ntp-4.2.6p3-bcast.patch # align buffer for control messages Patch4: ntp-4.2.6p1-cmsgalign.patch # link ntpd with -ffast-math on ia64 Patch5: ntp-4.2.6p1-linkfastmath.patch # ntpbz #2294 Patch6: ntp-4.2.6p5-fipsmd5.patch # ntpbz #759 Patch7: ntp-4.2.6p1-retcode.patch # ntpbz #2085 Patch8: ntp-4.2.6p5-rootdisp.patch # ntpbz #2309 Patch9: ntp-4.2.6p5-hexpw.patch # ntpbz #898 Patch10: ntp-4.2.6p4-htmldoc.patch # ntpbz #1402 Patch11: ntp-4.2.6p5-updatebclient.patch # fix precision calculation on fast CPUs Patch12: ntp-4.2.4p7-getprecision.patch # ntpbz #1408 Patch13: ntp-4.2.6p5-logdefault.patch # add option -m to lock memory Patch14: ntp-4.2.6p5-mlock.patch # allow -u and -p options to be used twice (#639101) Patch15: ntp-4.2.6p5-multiopts.patch # ntpbz #2040 Patch16: ntp-4.2.6p5-identlen.patch # ntpbz #1670 Patch17: ntp-4.2.6p3-broadcastdelay.patch # ntpbz #1671 Patch18: ntp-4.2.6p5-delaycalib.patch # ntpbz #2019 Patch19: ntp-4.2.6p5-pwcipher.patch # ntpbz #2320 Patch20: ntp-4.2.6p5-noservres.patch # ntpbz #2506 Patch21: ntp-4.2.6p5-refreshroute.patch # ntpbz #2666 Patch22: ntp-4.2.6p5-cve-2014-9294.patch # ntpbz #2665 Patch23: ntp-4.2.6p5-cve-2014-9293.patch # ntpbz #2667 Patch24: ntp-4.2.6p5-cve-2014-9295.patch # ntpbz #2670 Patch25: ntp-4.2.6p5-cve-2014-9296.patch # ntpbz #2671 Patch26: ntp-4.2.6p5-cve-2014-9297.patch # ntpbz #2672 Patch27: ntp-4.2.6p5-cve-2014-9298.patch # ntpbz #2174 Patch28: ntp-4.2.6p5-sourceport.patch # ntpbz #2612 Patch29: ntp-4.2.6p5-monwarn.patch # ntpbz #1232 Patch30: ntp-4.2.6p5-nanoshm.patch # ntpbz #2661 Patch32: ntp-4.2.6p5-mreadvar.patch # ntpbz #730 Patch33: ntp-4.2.6p5-rsaexp.patch # ntpbz #2537 Patch34: ntp-4.2.6p5-keylen.patch # ntpbz #2627 Patch35: ntp-4.2.6p5-shmperm.patch # ntpbz #2745 Patch36: ntp-4.2.6p5-xleap.patch # ntpbz #2805 Patch37: ntp-4.2.6p5-mcastjoin.patch # ntpbz #2763, ntpbz #2811 Patch38: ntp-4.2.6p5-backfwdstep.patch # ntpbz #2779 Patch39: ntp-4.2.6p5-cve-2015-1798.patch # ntpbz #2781 Patch40: ntp-4.2.6p5-cve-2015-1799.patch # ntpbz #2797 Patch41: ntp-4.2.6p5-cve-2015-3405.patch # ntpbz #2837 Patch42: ntp-4.2.6p5-dscp.patch # ntpbz #2901 Patch43: ntp-4.2.6p5-cve-2015-7704.patch # allow only one step larger than panic threshold with -g Patch44: ntp-4.2.6p5-cve-2015-5300.patch # ntpbz #2246 Patch45: ntp-4.2.6p5-leapreset.patch # ntpbz #2081 Patch46: ntp-4.2.6p5-rawstats.patch # ntpbz #2639, #2880 Patch47: ntp-4.2.6p5-clockstate.patch # ntpbz #2851 Patch48: ntp-4.2.6p5-restrict46.patch # ntpbz #1593 Patch49: ntp-4.2.6p5-cve-2015-5194.patch # fix crash when referencing disabled statistic type Patch50: ntp-4.2.6p5-cve-2015-5195.patch # don't hang in sntp with crafted reply Patch51: ntp-4.2.6p5-cve-2015-5219.patch # ntpbz #2909 Patch52: ntp-4.2.6p5-cve-2015-7701.patch # ntpbz #2899 Patch53: ntp-4.2.6p5-cve-2015-7691_7692_7702.patch # ntpbz #2919 Patch54: ntp-4.2.6p5-cve-2015-7852.patch # ntpbz #2902 Patch55: ntp-4.2.6p5-cve-2015-7703.patch # ntpbz #2945 Patch56: ntp-4.2.6p5-cve-2015-8138.patch # ntpbz #2939, #2940 Patch57: ntp-4.2.6p5-cve-2015-7977_7978.patch # ntpbz #2948 Patch58: ntp-4.2.6p5-cve-2015-8158.patch # ntpbz #2936 Patch59: ntp-4.2.6p5-cve-2015-7974.patch # ntpbz #2942, ntpbz #3007 Patch60: ntp-4.2.6p5-cve-2015-7979.patch # ntpbz #2978 Patch61: ntp-4.2.6p5-cve-2016-1548.patch # ntpbz #3009 Patch62: ntp-4.2.6p5-cve-2016-2518.patch # ntpbz #2879 Patch63: ntp-4.2.6p5-cve-2016-1550.patch # ntpbz #3071 Patch64: ntp-4.2.6p5-cve-2016-7426.patch # ntpbz #3072 Patch65: ntp-4.2.6p5-cve-2016-7429.patch # ntpbz #3067 Patch66: ntp-4.2.6p5-cve-2016-7433.patch # ntpbz #3118 Patch67: ntp-4.2.6p5-cve-2016-9310.patch # ntpbz #3119 Patch68: ntp-4.2.6p5-cve-2016-9311.patch # ntpbz #3388 Patch69: ntp-4.2.6p5-cve-2017-6462.patch # ntpbz #3387 Patch70: ntp-4.2.6p5-cve-2017-6463.patch # ntpbz #3389 Patch71: ntp-4.2.6p5-cve-2017-6464.patch # add Spectracom TSYNC driver Patch72: ntp-4.2.6p5-tsyncdriver.patch # ntpbz #3434 Patch73: ntp-4.2.6p5-staunsync.patch # use SHA1 request key by default (#1442083) Patch74: ntp-4.2.6p5-defreqkey.patch # ntpbz #3505 Patch75: ntp-4.2.6p5-cve-2018-12327.patch # ntpbz #2922 Patch76: ntp-4.2.6p5-decodenetnum.patch # ntpbz #2224 Patch77: ntp-4.2.6p5-netlinkdrop.patch # ntpbz #2890 Patch78: ntp-4.2.6p5-netlinknobuf.patch # add bugs for compatibility with original EL7 ntpstat Patch100: ntpstat-compat.patch URL: http://www.ntp.org Requires(post): systemd-units Requires(preun): systemd-units Requires(postun): systemd-units Requires: ntpdate = %{version}-%{release} BuildRequires: libcap-devel openssl-devel libedit-devel perl-HTML-Parser BuildRequires: pps-tools-devel autogen autogen-libopts-devel systemd-units BuildRequires: bison %description The Network Time Protocol (NTP) is used to synchronize a computer's time with another reference time source. This package includes ntpd (a daemon which continuously adjusts system time) and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl package, ntpdate is in the ntpdate package and sntp is in the sntp package. The documentation is in the ntp-doc package. %package perl Summary: NTP utilities written in Perl Group: Applications/System Requires: %{name} = %{version}-%{release} Requires(post): systemd-units Requires(preun): systemd-units Requires(postun): systemd-units # perl introduced in 4.2.4p4-7 Obsoletes: %{name} < 4.2.4p4-7 BuildArch: noarch %description perl This package contains Perl scripts ntp-wait and ntptrace. %package -n ntpdate Summary: Utility to set the date and time via NTP Group: Applications/System Requires(pre): shadow-utils Requires(post): systemd-units Requires(preun): systemd-units Requires(postun): systemd-units %description -n ntpdate ntpdate is a program for retrieving the date and time from NTP servers. %package -n sntp Summary: Standard Simple Network Time Protocol program Group: Applications/System Requires(post): systemd-units Requires(preun): systemd-units Requires(postun): systemd-units %description -n sntp sntp can be used as a SNTP client to query a NTP or SNTP server and either display the time or set the local system's time (given suitable privilege). It can be run as an interactive command or in a cron job. %package doc Summary: NTP documentation Group: Documentation Requires: %{name} = %{version}-%{release} BuildArch: noarch %description doc This package contains NTP documentation in HTML format. %global ntpdocdir %{_datadir}/doc/%{name}-%{version} # pool.ntp.org vendor zone which will be used in ntp.conf %if 0%{!?vendorzone:1} %{?fedora: %global vendorzone fedora.} %{?rhel: %global vendorzone rhel.} %endif %prep %setup -q -a 5 %patch1 -p1 -b .sleep %patch2 -p1 -b .droproot %patch3 -p1 -b .bcast %patch4 -p1 -b .cmsgalign %ifarch ia64 %patch5 -p1 -b .linkfastmath %endif %patch6 -p1 -b .fipsmd5 %patch7 -p1 -b .retcode %patch8 -p1 -b .rootdisp %patch9 -p1 -b .hexpw %patch10 -p1 -b .htmldoc %patch11 -p1 -b .updatebclient %patch12 -p1 -b .getprecision %patch13 -p1 -b .logdefault %patch14 -p1 -b .mlock %patch15 -p1 -b .multiopts %patch16 -p1 -b .identlen %patch17 -p1 -b .broadcastdelay %patch18 -p1 -b .delaycalib %patch19 -p1 -b .pwcipher %patch20 -p1 -b .noservres %patch21 -p1 -b .refreshroute %patch22 -p1 -b .cve-2014-9294 %patch23 -p1 -b .cve-2014-9293 %patch24 -p1 -b .cve-2014-9295 %patch25 -p1 -b .cve-2014-9296 %patch26 -p1 -b .cve-2014-9297 %patch27 -p1 -b .cve-2014-9298 %patch28 -p1 -b .sourceport %patch29 -p1 -b .monwarn %patch30 -p1 -b .nanoshm %patch32 -p1 -b .mreadvar %patch33 -p1 -b .rsaexp %patch34 -p1 -b .keylen %patch35 -p1 -b .shmperm %patch36 -p1 -b .xleap %patch37 -p1 -b .mcastjoin %patch38 -p1 -b .backfwdstep %patch39 -p1 -b .cve-2015-1798 %patch40 -p1 -b .cve-2015-1799 %patch41 -p1 -b .cve-2015-3405 %patch42 -p1 -b .dscp %patch43 -p1 -b .cve-2015-7704 %patch44 -p1 -b .cve-2015-5300 %patch45 -p1 -b .leapreset %patch46 -p1 -b .rawstats %patch47 -p1 -b .clockstate %patch48 -p1 -b .restrict46 %patch49 -p1 -b .cve-2015-5194 %patch50 -p1 -b .cve-2015-5195 %patch51 -p1 -b .cve-2015-5219 %patch52 -p1 -b .cve-2015-7701 %patch53 -p1 -b .cve-2015-7691_7692_7702 %patch54 -p1 -b .cve-2015-7852 %patch55 -p1 -b .cve-2015-7703 %patch56 -p1 -b .cve-2015-8138 %patch57 -p1 -b .cve-2015-7977_7978 %patch58 -p1 -b .cve-2015-8158 %patch59 -p1 -b .cve-2015-7974 %patch60 -p1 -b .cve-2015-7979 %patch61 -p1 -b .cve-2016-1548 %patch62 -p1 -b .cve-2016-2518 %patch63 -p1 -b .cve-2016-1550 %patch64 -p1 -b .cve-2016-7426 %patch65 -p1 -b .cve-2016-7429 %patch66 -p1 -b .cve-2016-7433 %patch67 -p1 -b .cve-2016-9310 %patch68 -p1 -b .cve-2016-9311 %patch69 -p1 -b .cve-2017-6462 %patch70 -p1 -b .cve-2017-6463 %patch71 -p1 -b .cve-2017-6464 %patch72 -p1 -b .tsyncdriver %patch73 -p1 -b .staunsync %patch74 -p1 -b .defreqkey %patch75 -p1 -b .cve-2018-12327 %patch76 -p1 -b .decodenetnum %patch77 -p1 -b .netlinkdrop %patch78 -p1 -b .netlinknobuf %patch100 -p1 -b .compat # set default path to sntp KoD database sed -i 's|/var/db/ntp-kod|%{_localstatedir}/lib/sntp/kod|' sntp/{sntp.1,main.c} # fix line terminators sed -i 's|\r||g' html/scripts/{footer.txt,style.css} for f in COPYRIGHT ChangeLog; do iconv -f iso8859-1 -t utf8 -o ${f}{_,} && touch -r ${f}{,_} && mv -f ${f}{_,} done # don't regenerate texinfo files as it breaks build with _smp_mflags touch ntpd/ntpd-opts.texi util/ntp-keygen-opts.texi # autogen fails to regenerate man pages (#958908), but they won't be used anyway touch ntpd/ntpd.1 util/ntp-keygen.1 # make the build fail if the parsers are not regenerated rm ntpd/ntp_parser.{c,h} echo > ntpd/ntp_keyword.h # hardcode paths in ntpstat sed -i '/^CHRONYC=/s|chronyc|%{_bindir}/chronyc|' ntpstat-*/ntpstat sed -i '/^NTPQ=/s|ntpq|%{_sbindir}/ntpq|' ntpstat-*/ntpstat %build sed -i 's|$CFLAGS -Wstrict-overflow|$CFLAGS|' configure sntp/configure export CFLAGS="$RPM_OPT_FLAGS -fPIE -fno-strict-aliasing -fno-strict-overflow" export LDFLAGS="-pie -Wl,-z,relro,-z,now" %configure \ --sysconfdir=%{_sysconfdir}/ntp/crypto \ --with-openssl-libdir=%{_libdir} \ --without-ntpsnmpd \ --enable-all-clocks --enable-parse-clocks \ --enable-ntp-signd=%{_localstatedir}/run/ntp_signd \ --disable-local-libopts echo '#define KEYFILE "%{_sysconfdir}/ntp/keys"' >> ntpdate/ntpdate.h echo '#define NTP_VAR "%{_localstatedir}/log/ntpstats/"' >> config.h make -C ntpd ntp_keyword.h make %{?_smp_mflags} sed -i 's|$ntpq = "ntpq"|$ntpq = "%{_sbindir}/ntpq"|' scripts/ntptrace sed -i 's|ntpq -c |%{_sbindir}/ntpq -c |' scripts/ntp-wait pushd html ../scripts/html2man # remove adjacent blank lines sed -i 's/^[\t\ ]*$//;/./,/^$/!d' man/man*/*.[58] popd %install make DESTDIR=$RPM_BUILD_ROOT bindir=%{_sbindir} install mkdir -p $RPM_BUILD_ROOT%{_mandir}/man{5,8} sed -i 's/sntp\.1/sntp\.8/' $RPM_BUILD_ROOT%{_mandir}/man1/sntp.1 mv $RPM_BUILD_ROOT%{_mandir}/man{1/sntp.1,8/sntp.8} rm -rf $RPM_BUILD_ROOT%{_mandir}/man1 %makeinstall -C ntpstat-* # fix section numbers sed -i 's/\(\.TH[a-zA-Z ]*\)[1-9]\(.*\)/\18\2/' $RPM_BUILD_ROOT%{_mandir}/man8/*.8 cp -r html/man/man[58] $RPM_BUILD_ROOT%{_mandir} mkdir -p $RPM_BUILD_ROOT%{ntpdocdir} cp -p COPYRIGHT ChangeLog NEWS $RPM_BUILD_ROOT%{ntpdocdir} # prepare html documentation find html | grep -E '\.(html|css|txt|jpg|gif)$' | grep -v '/build/\|sntp' | \ cpio -pmd $RPM_BUILD_ROOT%{ntpdocdir} find $RPM_BUILD_ROOT%{ntpdocdir} -type f | xargs chmod 644 find $RPM_BUILD_ROOT%{ntpdocdir} -type d | xargs chmod 755 pushd $RPM_BUILD_ROOT mkdir -p .%{_sysconfdir}/{ntp/crypto,sysconfig,dhcp/dhclient.d} .%{_libexecdir} mkdir -p .%{_localstatedir}/{lib/{s,}ntp,log/ntpstats} .%{_unitdir} touch .%{_localstatedir}/lib/{ntp/drift,sntp/kod} sed -e 's|VENDORZONE\.|%{vendorzone}|' \ -e 's|ETCNTP|%{_sysconfdir}/ntp|' \ -e 's|VARNTP|%{_localstatedir}/lib/ntp|' \ < %{SOURCE1} > .%{_sysconfdir}/ntp.conf touch -r %{SOURCE1} .%{_sysconfdir}/ntp.conf install -p -m600 %{SOURCE2} .%{_sysconfdir}/ntp/keys install -p -m755 %{SOURCE7} .%{_libexecdir}/ntpdate-wrapper install -p -m644 %{SOURCE4} .%{_sysconfdir}/sysconfig/ntpd install -p -m644 %{SOURCE9} .%{_sysconfdir}/sysconfig/ntpdate sed -e 's|VENDORZONE\.|%{vendorzone}|' \ < %{SOURCE6} > .%{_sysconfdir}/ntp/step-tickers touch -r %{SOURCE6} .%{_sysconfdir}/ntp/step-tickers sed -e 's|VENDORZONE\.|%{vendorzone}|' \ < %{SOURCE16} > .%{_sysconfdir}/sysconfig/sntp touch -r %{SOURCE16} .%{_sysconfdir}/sysconfig/sntp install -p -m600 %{SOURCE8} .%{_sysconfdir}/ntp/crypto/pw install -p -m755 %{SOURCE10} .%{_sysconfdir}/dhcp/dhclient.d/ntp.sh install -p -m644 %{SOURCE12} .%{_unitdir}/ntpd.service install -p -m644 %{SOURCE13} .%{_unitdir}/ntpdate.service install -p -m644 %{SOURCE14} .%{_unitdir}/ntp-wait.service install -p -m644 %{SOURCE15} .%{_unitdir}/sntp.service mkdir .%{_prefix}/lib/systemd/ntp-units.d echo 'ntpd.service' > .%{_prefix}/lib/systemd/ntp-units.d/60-ntpd.list popd %pre -n ntpdate /usr/sbin/groupadd -g 38 ntp 2> /dev/null || : /usr/sbin/useradd -u 38 -g 38 -s /sbin/nologin -M -r -d %{_sysconfdir}/ntp ntp 2>/dev/null || : %post %systemd_post ntpd.service %post -n ntpdate %systemd_post ntpdate.service %post -n sntp %systemd_post sntp.service %post perl %systemd_post ntp-wait.service %preun %systemd_preun ntpd.service %preun -n ntpdate %systemd_preun ntpdate.service %preun -n sntp %systemd_preun sntp.service %preun perl %systemd_preun ntp-wait.service %postun %systemd_postun_with_restart ntpd.service %postun -n ntpdate %systemd_postun %postun -n sntp %systemd_postun %postun perl %systemd_postun %files %dir %{ntpdocdir} %{ntpdocdir}/COPYRIGHT %{ntpdocdir}/ChangeLog %{ntpdocdir}/NEWS %{_sbindir}/ntp-keygen %{_sbindir}/ntpd %{_sbindir}/ntpdc %{_sbindir}/ntpq %{_sbindir}/ntptime %{_sbindir}/tickadj %config(noreplace) %{_sysconfdir}/sysconfig/ntpd %config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/ntp.conf %dir %attr(750,root,ntp) %{_sysconfdir}/ntp/crypto %config(noreplace) %{_sysconfdir}/ntp/crypto/pw %dir %{_sysconfdir}/dhcp/dhclient.d %{_sysconfdir}/dhcp/dhclient.d/ntp.sh %dir %attr(-,ntp,ntp) %{_localstatedir}/lib/ntp %ghost %attr(644,ntp,ntp) %{_localstatedir}/lib/ntp/drift %dir %attr(-,ntp,ntp) %{_localstatedir}/log/ntpstats %{_bindir}/ntpstat %{_mandir}/man1/ntpstat.1* %{_mandir}/man5/*.5* %{_mandir}/man8/ntp-keygen.8* %{_mandir}/man8/ntpd.8* %{_mandir}/man8/ntpdc.8* %{_mandir}/man8/ntpq.8* %{_mandir}/man8/ntptime.8* %{_mandir}/man8/tickadj.8* %{_prefix}/lib/systemd/ntp-units.d/*.list %{_unitdir}/ntpd.service %files perl %{_sbindir}/ntp-wait %{_sbindir}/ntptrace %{_mandir}/man8/ntp-wait.8* %{_mandir}/man8/ntptrace.8* %{_unitdir}/ntp-wait.service %files -n ntpdate %doc COPYRIGHT %config(noreplace) %{_sysconfdir}/sysconfig/ntpdate %dir %{_sysconfdir}/ntp %config(noreplace) %{_sysconfdir}/ntp/keys %config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/ntp/step-tickers %{_libexecdir}/ntpdate-wrapper %{_sbindir}/ntpdate %{_mandir}/man8/ntpdate.8* %{_unitdir}/ntpdate.service %files -n sntp %doc sntp/COPYRIGHT %config(noreplace) %{_sysconfdir}/sysconfig/sntp %{_sbindir}/sntp %{_mandir}/man8/sntp.8* %dir %{_localstatedir}/lib/sntp %ghost %{_localstatedir}/lib/sntp/kod %{_unitdir}/sntp.service %files doc %{ntpdocdir}/html %changelog * Fri Jan 11 2019 Miroslav Lichvar 4.2.6p5-29 - fix CVE-2016-7429 patch to restore default ttl configuration (#1550637) - fix buffer overflow in parsing of address in ntpq and ntpdc (CVE-2018-12327) - fix crash in parsing of received address in ntpq (#1616250) - avoid reading freed memory after disabling netlink socket (#1555401) - don't disable netlink socket on ENOBUFS error (#1555413) - replace ntpstat with shell script using ntpq and supporting chrony (#1592871) * Mon Oct 09 2017 Miroslav Lichvar 4.2.6p5-28 - fix buffer overflow in datum refclock driver (CVE-2017-6462) - fix crash with invalid unpeer command (CVE-2017-6463) - fix potential crash with invalid server command (CVE-2017-6464) - add Spectracom TSYNC driver (#1491797) - fix initialization of system clock status (#1493452) - fix typos in ntpd man page (#1420453) - use SHA1 request key by default (#1442083) - use network-online target in ntpdate and sntp services (#1466947) * Tue Feb 28 2017 Miroslav Lichvar 4.2.6p5-27 - fix CVE-2016-7429 patch to work correctly on multicast client (#1422944) * Wed Jan 11 2017 Miroslav Lichvar 4.2.6p5-26 - don't limit rate of packets from sources (CVE-2016-7426) - don't change interface from received packets (CVE-2016-7429) - fix calculation of root distance again (CVE-2016-7433) - require authentication for trap commands (CVE-2016-9310) - fix crash when reporting peer event to trappers (CVE-2016-9311) * Tue May 03 2016 Miroslav Lichvar 4.2.6p5-25 - don't allow spoofed packet to enable symmetric interleaved mode (CVE-2016-1548) - check mode of new source in config command (CVE-2016-2518) - make MAC check resilient against timing attack (CVE-2016-1550) * Tue Mar 15 2016 Miroslav Lichvar 4.2.6p5-24 - fix crash with invalid logconfig command (CVE-2015-5194) - fix crash when referencing disabled statistic type (CVE-2015-5195) - don't hang in sntp with crafted reply (CVE-2015-5219) - don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692, CVE-2015-7702) - fix memory leak with autokey (CVE-2015-7701) - don't allow setting driftfile and pidfile remotely (CVE-2015-7703) - don't crash in ntpq with crafted packet (CVE-2015-7852) - check key ID in packets authenticated with symmetric key (CVE-2015-7974) - fix crash with reslist command (CVE-2015-7977, CVE-2015-7978) - don't allow spoofed packets to demobilize associations (CVE-2015-7979, CVE-2016-1547) - don't accept server/peer packets with zero origin timestamp (CVE-2015-8138) - fix infinite loop in ntpq/ntpdc (CVE-2015-8158) - fix resetting of leap status (#1242553) - extend rawstats log (#1242877) - report clock state changes related to leap seconds (#1242935) - allow -4/-6 on restrict lines with mask (#1304492) - explain synchronised state in ntpstat man page (#1309594) * Fri Oct 16 2015 Miroslav Lichvar 4.2.6p5-22 - check origin timestamp before accepting KoD RATE packet (CVE-2015-7704) - allow only one step larger than panic threshold with -g (CVE-2015-5300) * Thu Jun 04 2015 Miroslav Lichvar 4.2.6p5-20 - validate lengths of values in extension fields (CVE-2014-9297) - drop packets with spoofed source address ::1 (CVE-2014-9298) - reject packets without MAC when authentication is enabled (CVE-2015-1798) - protect symmetric associations with symmetric key against DoS attack (CVE-2015-1799) - fix generation of MD5 keys with ntp-keygen on big-endian systems (CVE-2015-3405) - add option to set Differentiated Services Code Point (DSCP) (#1202828) - add nanosecond support to SHM refclock (#1117702) - allow creating all SHM segments with owner-only access (#1122012) - allow different thresholds for forward and backward step (#1193154) - allow symmetric keys up to 32 bytes again (#1191111) - don't step clock for leap second with -x option (#1191122) - don't drop packets with source port below 123 (#1171640) - retry joining multicast groups (#1207014) - increase memlock limit again (#1053569) - warn when monitor can't be disabled due to limited restrict (#1191108) - use larger RSA exponent in ntp-keygen (#1191116) - fix crash in ntpq mreadvar command (#1180721) - move sntp kod database to allow SELinux labeling (#1082934) - fix typos in ntpd man page (#1195211) - improve documentation of restrict command (#1213953) * Fri Dec 19 2014 Miroslav Lichvar 4.2.6p5-19 - don't generate weak control key for resolver (CVE-2014-9293) - don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294) - fix buffer overflows via specially-crafted packets (CVE-2014-9295) - don't mobilize passive association when authentication fails (CVE-2014-9296) * Tue Feb 11 2014 Miroslav Lichvar 4.2.6p5-18 - disable monitor in default ntp.conf (#1047856) * Fri Jan 24 2014 Daniel Mach - 4.2.6p5-17 - Mass rebuild 2014-01-24 * Fri Jan 03 2014 Miroslav Lichvar 4.2.6p5-16 - refresh peers on routing updates (#1048132) - fix calculation of root dispersion (#1045377) - remove unnecessary IPv6 restrict line from default ntp.conf (#1048255) - remove kod from default restrict in ntp.conf (#1048255) - update logconfig documentation for patched default (#1048252) * Fri Dec 27 2013 Daniel Mach - 4.2.6p5-15 - Mass rebuild 2013-12-27 * Fri Oct 04 2013 Miroslav Lichvar 4.2.6p5-14 - remove ControlGroup in ntpd service (#999980) - don't build ntpsnmpd (#1015435) * Mon Jul 15 2013 Miroslav Lichvar 4.2.6p5-13 - ignore duplicate servers from dhclient - don't use -Wstrict-overflow with -fno-strict-overflow - buildrequire systemd-units - remove pie test * Thu May 02 2013 Miroslav Lichvar 4.2.6p5-12 - workaround failing autogen - move files from /lib - don't own ntp-units.d directory - drop old systemd scriptlets - fix dates in changelog * Tue Apr 02 2013 Miroslav Lichvar 4.2.6p5-11 - avoid rereading /etc/services (#768804) - remove ntp-wait dependency from ntpd service (#906753) - add missing and remove unrecognized options in documentation - update comments in some config files * Thu Feb 14 2013 Fedora Release Engineering - 4.2.6p5-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Fri Jan 04 2013 Miroslav Lichvar 4.2.6p5-9 - compile with -fno-strict-overflow * Wed Dec 05 2012 Miroslav Lichvar 4.2.6p5-8 - add option to set identity modulus size in ntp-keygen * Fri Nov 23 2012 Miroslav Lichvar 4.2.6p5-7 - allow selection of cipher for private key files - set identity modulus size in ntp-keygen - create sntp subpackage - add sntp service - use system libopts - add Wants=ntp-wait.service to ntpd service - don't fail when /etc/sysconfig/ntpd is missing - modify mlock and multiopts patches to use autogen - make perl subpackage noarch * Tue Nov 20 2012 Miroslav Lichvar 4.2.6p5-6 - bind broadcast client to new interfaces (#722690) - decode hex encoded passwords in ntpq/ntpdc - remove sample MD5 keys from default keys config * Wed Oct 24 2012 Miroslav Lichvar 4.2.6p5-5 - fix crash in FIPS mode (#839280) - use systemd macros if available (#850235) - remove obsolete macros * Tue Aug 07 2012 Miroslav Lichvar 4.2.6p5-4 - start ntpdate service after nss-lookup.target (#837486) - update systemd-timedated integration (#846077) * Fri Jul 20 2012 Fedora Release Engineering - 4.2.6p5-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Fri Apr 27 2012 Miroslav Lichvar 4.2.6p5-2 - update service file for systemd-timedated-ntp target (#816495) - allow service to set realtime scheduler (#810801) - drop comment enabling local driver in default config * Tue Feb 28 2012 Miroslav Lichvar 4.2.6p5-1 - update to 4.2.6p5 - switch service type to forking * Tue Feb 07 2012 Miroslav Lichvar 4.2.6p4-3 - add default servers to step-tickers (#772389) - enable PrivateTmp in ntpd service (#782520) * Fri Jan 13 2012 Fedora Release Engineering - 4.2.6p4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Thu Oct 06 2011 Miroslav Lichvar 4.2.6p4-1 - update to 4.2.6p4 - buildrequire pps-tools-devel - fix errors in ntpstat found by coverity * Sun Aug 14 2011 Rex Dieter - 4.2.6p3-5.1 - Rebuilt for rpm (#728707) * Wed Jul 20 2011 Miroslav Lichvar 4.2.6p3-5 - drop SysV init scripts (#697526, #714705) - add ntp-wait service * Fri May 06 2011 Bill Nottingham 4.2.6p3-4 - fix systemd scriplets to properly handle upgrades * Wed Apr 06 2011 Miroslav Lichvar 4.2.6p3-3 - pull in time-sync.target from ntpdate.service (Lennart Poettering) - link with -Wl,-z,relro,-z,now options - fix typo in ntpq man page (#664525) * Tue Feb 08 2011 Fedora Release Engineering - 4.2.6p3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Fri Jan 07 2011 Miroslav Lichvar 4.2.6p3-1 - update to 4.2.6p3 * Thu Nov 25 2010 Miroslav Lichvar 4.2.6p3-0.1.rc10 - update to 4.2.6p3-RC10 - fix system peer unmarking when unreachable - fix broadcastdelay option - fix automatic broadcast delay calibration - fix ntp-keygen -V crash - avoid unnecessary timeout in ntpdate - drop nano patch - convert ChangeLog to UTF-8 * Fri Oct 01 2010 Miroslav Lichvar 4.2.6p2-7 - allow -u and -p options to be used twice (#639101) * Wed Sep 29 2010 jkeating - 4.2.6p2-6 - Rebuilt for gcc bug 634757 * Wed Sep 15 2010 Miroslav Lichvar 4.2.6p2-5 - remove systemctl dependency for now - suppress chkconfig output in %%post (#629285) - generate ntp_decode(5) man page (#632300) * Fri Aug 27 2010 Miroslav Lichvar 4.2.6p2-4 - fix default ntpdate sysconfig options (#445229) * Thu Aug 26 2010 Miroslav Lichvar 4.2.6p2-3 - update ntpdate service (#627395) * Mon Aug 23 2010 Miroslav Lichvar 4.2.6p2-2 - add support for systemd (#617328) - retry few times in ntpdate init script before giving up (#445229) - add fourth pool server to default ntp.conf and use iburst * Tue Jul 13 2010 Miroslav Lichvar 4.2.6p2-1 - update to 4.2.6p2 - add COPYRIGHT to ntpdate subpackage * Thu May 13 2010 Miroslav Lichvar 4.2.6p1-2 - update ntpstat to use current system variable names (#588067) - print synchronization distance instead of dispersion in ntpstat - clarify ntpd -q description * Mon Apr 12 2010 Miroslav Lichvar 4.2.6p1-1 - update to 4.2.6p1 * Fri Mar 19 2010 Miroslav Lichvar 4.2.6p1-0.1.rc5 - update to 4.2.6p1-RC5 - support NTPSERVERARGS variable in dhclient script (#558110) - don't use deprecated egrep (#548182) - don't verify ntp.conf (#481151) - compile with PPS API support - include new sntp * Wed Dec 09 2009 Miroslav Lichvar 4.2.4p8-1 - update to 4.2.4p8 (#545557, CVE-2009-3563) * Wed Oct 21 2009 Miroslav Lichvar 4.2.4p7-7 - add ntp-wait man page (#526161) - fix init scripts (#527987) * Tue Sep 29 2009 Miroslav Lichvar 4.2.4p7-6 - generate tickadj man page (#526161) - fix precision calculation on fast CPUs * Fri Aug 21 2009 Tomas Mraz - 4.2.4p7-5 - rebuilt with new openssl * Sat Jul 25 2009 Fedora Release Engineering - 4.2.4p7-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild * Tue Jul 21 2009 Miroslav Lichvar 4.2.4p7-3 - handle system time jumps better - don't wake up every second for refclocks without timer - don't crash in ntpstat when unknown clock type is received (#505564) - make ntpstat process first packet in multipacket response - switch to editline - set pool.ntp.org vendor zone in spec (#512711) - compile with -fno-strict-aliasing * Thu May 28 2009 Miroslav Lichvar 4.2.4p7-2 - fix frequency calculation when starting with no drift file - reduce phase adjustments beyond Allan intercept in daemon PLL * Tue May 19 2009 Miroslav Lichvar 4.2.4p7-1 - update to 4.2.4p7 (CVE-2009-1252) - improve PLL response when kernel discipline is disabled - don't log STA_MODE changes - enable nanokernel support - allow minpoll 3 - increase memlock limit - move html documentation to -doc subpackage (#492444) * Mon Apr 20 2009 Miroslav Lichvar 4.2.4p6-4 - don't restart ntpd in dhclient script with every renewal - fix buffer overflow in ntpq (#490617) - check status in condrestart (#481261) - don't crash when compiled with HAVE_TIMER_CREATE (#486217) * Wed Feb 25 2009 Fedora Release Engineering - 4.2.4p6-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild * Fri Jan 16 2009 Miroslav Lichvar 4.2.4p6-2 - rebuild for new openssl * Wed Jan 14 2009 Miroslav Lichvar 4.2.4p6-1 - update to 4.2.4p6 (CVE-2009-0021) - include dhclient script (David Cantrell) - convert COPYRIGHT to UTF-8 * Wed Oct 08 2008 Miroslav Lichvar 4.2.4p5-2 - retry failed name resolution few times before giving up (#460561) - don't write drift file upon exit - run ntpq with full path in ntp-wait script * Fri Aug 29 2008 Miroslav Lichvar 4.2.4p5-1 - update to 4.2.4p5 - add support for fast interface updates * Mon Jul 28 2008 Miroslav Lichvar 4.2.4p4-7 - reload resolv.conf after temporary failure in name resolution (#456743) - use clock_gettime - make subpackages for perl scripts and ntpdate (#452097, #456116) * Mon Apr 07 2008 Miroslav Lichvar 4.2.4p4-6 - don't use /etc/sysconfig/clock in ntpdate init script * Mon Mar 10 2008 Miroslav Lichvar 4.2.4p4-5 - fix building IPv6 support with new glibc-headers (#436713) - avoid unaligned memory access (#435301) - fix receiving broadcasts on 255.255.255.255 * Fri Feb 29 2008 Miroslav Lichvar 4.2.4p4-4 - reset kernel frequency when -x option is used - create separate init script for ntpdate - add note about paths and exit codes to ntpd man page * Tue Feb 19 2008 Fedora Release Engineering - 4.2.4p4-3 - Autorebuild for GCC 4.3 * Wed Dec 05 2007 Miroslav Lichvar 4.2.4p4-2 - rebuild for openssl bump * Fri Oct 26 2007 Miroslav Lichvar 4.2.4p4-1 - update to 4.2.4p4 - fix default NTP version for outgoing packets in ntpdate man page (#245408) - replace BSD with advertising code in ntpdc and ntpq * Mon Sep 24 2007 Miroslav Lichvar 4.2.4p2-6 - require perl (#274771) - don't fail when starting with no interfaces (#300371) * Tue Aug 21 2007 Miroslav Lichvar 4.2.4p2-5 - avoid use of uninitialized floating-point values in clock_select - update license tag (Tom "spot" Callaway) - drop sntp, MSNTP license is non-free * Mon Aug 13 2007 Miroslav Lichvar 4.2.4p2-4 - allow loopback to share non-loopback address (#249226) - require readline >= 5.2-3 (#250917) * Wed Jul 25 2007 Jesse Keating - 4.2.4p2-3 - Rebuild for RH #249435 * Tue Jul 24 2007 Miroslav Lichvar 4.2.4p2-2 - ignore tentative addresses (#246297) - improve init script (#247003) - fix sleep patch - ease Autokey setup (#139673) - change default keysdir to /etc/ntp/crypto - set crypto password in /etc/ntp/crypto/pw - don't use randfile if /dev/urandom is used by OpenSSL - change default statsdir to /var/log/ntpstats/, use statistics type as default filename - package more doc files * Thu Jun 21 2007 Miroslav Lichvar 4.2.4p2-1 - update to 4.2.4p2 * Tue May 22 2007 Miroslav Lichvar 4.2.4p0-3 - fix interface updates with -I or -L option (#240254) - accept multiple -I options - fix broadcast client/server to accept/allow sending broadcasts on 255.255.255.255 (#226958) - fix return codes in init script (#240120) - exit with nonzero code if ntpd -q did not set clock (#240134) - drop revert452 patch, fixed in kernel 2.6.19 - make with _smp_mflags * Wed May 09 2007 Miroslav Lichvar 4.2.4p0-2 - compile with crypto support on 64bit architectures (#239576) - update sleep patch * Wed Mar 07 2007 Miroslav Lichvar 4.2.4p0-1 - update to 4.2.4p0 - fix init script - don't add second -g to ntpd options (#228424) - update getopts - skip all refclocks when parsing ntp.conf - spec cleanup * Mon Jan 29 2007 Miroslav Lichvar 4.2.4-4 - don't wake up every second (#204748) - add option to enable memory locking (#195617) - fix broadcast client - use option values in ntp-keygen - improve man pages * Tue Jan 23 2007 Miroslav Lichvar 4.2.4-3 - disable autoopts option preset mechanisms for ntpd - document -I option of ntpd - generate makewhatis friendly man pages * Mon Jan 08 2007 Miroslav Lichvar 4.2.4-1 - update to 4.2.4 (#146884) - don't use local clock in default config - autogenerate man pages from HTML - clean up spec a bit * Wed Nov 22 2006 Miroslav Lichvar 4.2.2p4-2 - pass additional options to ntpdate (#202204) * Tue Nov 21 2006 Miroslav Lichvar 4.2.2p4-1 - update to 4.2.2p4 - fix buffer overflow in WWV Audio driver (#216309) - don't mark init script as config * Fri Aug 18 2006 Miroslav Lichvar 4.2.2p1-3 - use adjtime when offset is more than 0.5s (#154625) * Mon Jul 24 2006 Miroslav Lichvar 4.2.2p1-2 - link ntpd with -ffast-math on ia64 (#147980) * Tue Jul 18 2006 Miroslav Lichvar 4.2.2p1-1 - update to 4.2.2p1 - add more examples to ntp.conf * Thu Jul 06 2006 Miroslav Lichvar 4.2.2-3 - fix manycast support in ntpdate (#194329) - reply to manycast requests with null refid - enable mlockall (#195617) - correct threshold value in ntpdate manpage * Wed Jun 14 2006 Miroslav Lichvar 4.2.2-2 - update initscript, ntp.conf, man pages - package sntp * Mon Jun 12 2006 Miroslav Lichvar 4.2.2-1 - update to ntp-4.2.2 - drop drift file upgrade script - use proper CFLAGS for ntpstat * Thu May 11 2006 Miroslav Lichvar - 4.2.0.a.20050816-14 - modify ntp.conf, change default restrict, remove broadcastdelay, use fedora.pool.ntp.org (#189667) - don't install drift file - remove unsupported options from ntptrace manpage (#137717) - fix default paths in manpages for ntp-keygen and ntpdate * Fri Apr 07 2006 Miroslav Lichvar - 4.2.0.a.20050816-13 - add option to sync hwclock after ntpdate (#179571) * Fri Mar 31 2006 Miroslav Lichvar - 4.2.0.a.20050816-12 - fix initscript: - replace -U with -u in getopts (#187003) - don't pass group to ntpdate -U argument and ignore -i in options (#142926) - set ntpconf for -c - remove -p 8 from ntpdate arguments - don't call ntpdate when step-tickers doesn't contain anything useful and -x isn't in options - fix default keyfile for ntpdate (#183196) * Thu Feb 23 2006 Miroslav Lichvar - 4.2.0.a.20050816-11 - update man pages (#153195, #162856) - drop C-Frame-121, vsnprintf, minusTi and loconly patch - prevent segfault when loopback interface is not configured (#159056) - spec cleanup * Fri Feb 10 2006 Jesse Keating - 4.2.0.a.20050816-10.2.1 - bump again for double-long bug on ppc(64) * Tue Feb 07 2006 Jesse Keating - 4.2.0.a.20050816-10.2 - rebuilt for new gcc4.1 snapshot and glibc changes * Fri Dec 09 2005 Jesse Keating - rebuilt * Wed Nov 9 2005 Petr Raszyk 4.2.0.a.20050816-10 - ntpd does not submit his local clock (if there is no peer). ntpdate->ntpd #163862 , Patch13: ntp-stable-4.2.0a-20050816-loconly.patch * Wed Nov 2 2005 Petr Raszyk 4.2.0.a.20050816-9 - Wrong parameter -T -i - Patch ntp-stable-4.2.0a-20050816-minusTi.patch * Mon Oct 31 2005 Petr Raszyk 4.2.0.a.20050816-3 - A similar patch as ntp-4.0.99j-vsnprintf.patch in FEDORA CORE 4 - (current patch is ntp-stable-4.2.0a-20050816-vsnprintf.patch) * Tue Sep 27 2005 Petr Raszyk 4.2.0.a.20050816-2 - Fix fails on upgrade, if ntpd is disabled (#166773) - A cosmetic patch. There are some comments and braces '{' '}' added. - One unprintable character was converted to octal-form . - It can be removed anytime (conversion of the cvs-projets for C-Frame 121, - (auto-debug, auto-trace for cfr-printnet server). * Thu Aug 25 2005 Jindrich Novy 4.2.0.a.20050816-1 - update to the latest stable 4.2.0.a.20050816 - drop upstreamed .gcc4, .vsnprintf patches - remove obsolete .autofoo patch - make patch numbering less chaotic - don't package backup for .droproot patch * Thu Apr 14 2005 Jiri Ryska 4.2.0.a.20040617-8 - fixed gid setting when ntpd started with -u flag (#147743) * Tue Mar 08 2005 Jiri Ryska 4.2.0.a.20040617-7 - removed -Werror - patched for gcc4 and rebuilt * Wed Jan 12 2005 Tim Waugh - 4.2.0.a.20040617-6 - Rebuilt for new readline. * Mon Dec 13 2004 Harald Hoyer - 4.2.0.a.20040617-5 - patched ntp to build with -D_FORTIFYSOURCE=2 -Wall -Wextra -Werror * Mon Oct 11 2004 Harald Hoyer - 4.2.0.a.20040617-4 - removed firewall hole punching from the initscript; rely on iptables ESTABLISHED,RELATED or manual firewall configuration * Fri Oct 8 2004 Harald Hoyer - 4.2.0.a.20040617-3 - improved postsection - BuildRequires readline-devel - PreReq grep * Thu Sep 30 2004 Harald Hoyer - 4.2.0.a.20040617-2 - set pool.ntp.org as the default timeserver pool * Mon Sep 13 2004 Harald Hoyer - 4.2.0.a.20040617-1 - version ntp-stable-4.2.0a-20040617 * Tue Aug 17 2004 Harald Hoyer - 4.2.0.a.20040616-4 - added ntp-4.2.0-sbinpath.patch (bug 130536) * Tue Aug 17 2004 Harald Hoyer - 4.2.0.a.20040616-3 - added ntp-stable-4.2.0a-20040616-groups.patch (bug 130112) * Thu Jul 29 2004 Harald Hoyer - 4.2.0.a.20040616-2 - take chroot in account (bug 127252) * Fri Jul 23 2004 Harald Hoyer - 4.2.0.a.20040616-1 - new version ntp-stable-4.2.0a-20040616 - removed most patches * Tue Jun 15 2004 Elliot Lee - rebuilt * Thu Mar 11 2004 Harald Hoyer - 4.2.0-7 - ntpgenkey fixed (117378) - fixed initscript to call ntpdate with -U (117894) * Fri Feb 13 2004 Elliot Lee - rebuilt * Wed Jan 28 2004 Harald Hoyer - 4.2.0-5 - readded ntp-wait and ntptrace - new filter-requires to prevent perl dependency * Mon Jan 26 2004 Harald Hoyer 4.2.0-4 - added autofoo patch * Tue Oct 28 2003 Harald Hoyer 4.2.0-3 - removed libmd5 dependency - removed perl dependency * Tue Oct 28 2003 Harald Hoyer 4.2.0-2 - fixed initscript to use new FW chain name * Mon Oct 27 2003 Harald Hoyer 4.2.0-1 - 4.2.0 - added PIE * Thu Sep 11 2003 Harald Hoyer 4.1.2-4 - changed ntp.conf driftfile path #104207 * Fri Aug 29 2003 Florian La Roche - also build as non-root * Thu Aug 28 2003 Harald Hoyer 0:4.1.2-2 - added ntpstat - added manpages * Tue Jul 01 2003 Harald Hoyer 0:4.1.2-1.rc3.5 - move driftfile to /var * Tue Jul 01 2003 Harald Hoyer 0:4.1.2-1.rc3.4 - make a seperate directory for drift - security fix, patch ntp-4.1.1c-rc3-authkey.patch #96927 * Wed Jun 18 2003 Harald Hoyer 0:4.1.2-1.rc3.3 - %%{_sysconfdir}/ntp/drift.TEMP needs to be writable by ntp #97754 - no duplicate fw entries #97624 * Wed Jun 18 2003 Harald Hoyer 0:4.1.2-1.rc3.2 - changed permissions of config files * Tue Jun 17 2003 Harald Hoyer 0:4.1.2-1.rc3.1 - updated to rc3 * Wed Jun 04 2003 Elliot Lee - rebuilt * Thu May 22 2003 Harald Hoyer 0:4.1.2-0.rc2.2 - corrected pid file name in %%{_sysconfdir}/sysconfig/ntpd * Mon Apr 28 2003 Harald Hoyer 0:4.1.2-0.rc2.1 - update to 4.1.1rc2 * Tue Feb 25 2003 Harald Hoyer 0:4.1.2-0.rc1.3 - better awk for timeservers #85090, #82713, #82714 * Thu Feb 13 2003 Harald Hoyer 0:4.1.2-0.rc1.2 - added loopfilter patch, -x should work now! - removed slew warning * Mon Feb 10 2003 Harald Hoyer 1:4.1.1-2 - ok, messed up with the versions... added epoch :( * Fri Feb 07 2003 Harald Hoyer 4.1.1-1 - going back to stable 4.1.1 with the limit patch - added limit patch - added slew warning * Thu Jan 30 2003 Harald Hoyer 4.1.73-2 - removed exit on ntpdate fail, better add '-g' option * Wed Jan 29 2003 Harald Hoyer 4.1.73-1 - update to version 4.1.73 - removed most of the patches - limit ntp_adjtime parameters * Wed Jan 22 2003 Tim Powers - rebuilt * Wed Nov 20 2002 Harald Hoyer 4.1.1b-1 - updated to version 4.1.1b - improved initscript - use ntpdate on -x - improved initscript - open firewall only for timeservers - ntp-4.1.1a-adjtime.patch removed (already in source) - ntp-4.1.1a-mfp.patch removed (already in source) - ntp-4.0.99j-vsnprintf.patch removed (already in source) * Tue Nov 19 2002 Harald Hoyer 4.1.1a-12 - added adjtime patch #75558 * Wed Nov 13 2002 Harald Hoyer - more ntpd.init service description #77715 * Mon Nov 11 2002 Harald Hoyer - ntp-4.1.1a-mfp.patch fixes #77086 * Sat Aug 31 2002 Florian La Roche - add option -n to initscript to avoid DNS lookups #72756 * Fri Aug 23 2002 Jeremy Katz - service should fail to start ntpd if running ntpdate fails * Tue Aug 20 2002 Harald Hoyer - added two more 'echo's in the initscript * Thu Aug 15 2002 Harald Hoyer - added firewall opener in initscript * Tue Jul 23 2002 Harald Hoyer - removed libelf dependency - removed stripping * Fri Jun 21 2002 Tim Powers - automated rebuild * Tue Jun 11 2002 Harald Hoyer 4.1.1a-3 - refixed #46464 - another genkeys/snprintf bugfix * Wed May 22 2002 Harald Hoyer 4.1.1a-1 - update to version 4.1.1a * Mon Apr 08 2002 Harald Hoyer 4.1.1-1 - update to 4.1.1 (changes are minimal) - more examples in default configuration * Tue Apr 02 2002 Harald Hoyer 4.1.0b-6 - more secure default configuration (#62238) * Mon Jan 28 2002 Harald Hoyer 4.1.0b-5 - more regex magic for the grep (#57837) * Mon Jan 28 2002 Harald Hoyer 4.1.0b-4 - created drift with dummy value #58294 - grep for timeservers in ntp.conf also for ntpdate #57837 - check return value of ntpdate #58836 * Wed Jan 09 2002 Tim Powers 4.1.0b-3 - automated rebuild * Tue Jan 08 2002 Harald Hoyer 4.1.0b-2 - added --enable-all-clocks --enable-parse-clocks (#57761) * Thu Dec 13 2001 Harald Hoyer 4.1.0b-1 - bumped version - fixed #57391, #44580 - set startup position to 58 after named * Wed Sep 05 2001 Harald Hoyer 4.1.0-4 - fixed #53184 * Tue Sep 04 2001 Harald Hoyer 4.1.0-3 - fixed #53089 /bin/nologin -> /sbin/nologin * Fri Aug 31 2001 Harald Hoyer 4.1.0-2 - fixed #50247 thx to * Thu Aug 30 2001 Harald Hoyer 4.1.0-1 - wow, how stupid can a man be ;).. fixed #50698 - updated to 4.1.0 (changes are small and in non-critical regions) * Wed Aug 29 2001 Harald Hoyer 4.0.99mrc2-5 - really, really :) fixed #52763, #50698 and #50526 * Mon Aug 27 2001 Tim Powers 4.0.99mrc2-4 - rebuilt against newer libcap - Copyright -> license * Wed Jul 25 2001 Harald Hoyer 4.0.99mrc2-3 - integrated droproot patch (#35653) - removed librt and libreadline dependency * Sat Jul 7 2001 Tim Powers - don't build build sgid root dirs * Mon Jun 18 2001 Harald Hoyer - new snapshot - removed typos and security patch (already there) - commented multicastclient in config file * Thu Jun 07 2001 Florian La Roche - call libtoolize to compile on newer archs * Mon Apr 9 2001 Preston Brown - remove ghost files make RHN happy - modify initscript to match accordingly * Fri Apr 6 2001 Pekka Savola - Add the remote root exploit patch (based on ntp-hackers). - Enhance droproot patch (more documentation, etc.) - Tweak the droproot patch to include sys/prctl.h, not linux/prctl.h (implicit declarations) - Remote groupdel commands, shouldn't be needed. - Removed -Wcast-qual and -Wconversion due to excessive warnings (hackish). - Make ntp compilable with both glibc 2.1 and 2.2.x (very dirty hack) - Add %%{_sysconfdir}/sysconfig/ntpd which drops root privs by default * Thu Apr 5 2001 Preston Brown - security patch for ntpd * Mon Mar 26 2001 Preston Brown - don't run configure macro twice (#32804) * Sun Mar 25 2001 Pekka Savola - require/buildprereq libcap/libcap-devel - use 'ntp' user, tune the pre/post scripts, %%files - add $OPTIONS to the init script * Tue Mar 20 2001 Jarno Huuskonen - droproot/caps patch - add ntpd user in pre - make %%{_sysconfdir}/ntp ntpd writable * Mon Mar 5 2001 Preston Brown - allow comments in %%{_sysconfdir}/ntp/step-tickers file (#28786). - need patch0 (glibc patch) on ia64 too * Tue Feb 13 2001 Florian La Roche - also set prog=ntpd in initscript * Tue Feb 13 2001 Florian La Roche - use "$prog" instead of "$0" for the init script * Thu Feb 8 2001 Preston Brown - i18n-neutral .init script (#26525) * Tue Feb 6 2001 Preston Brown - use gethostbyname on addresses in %%{_sysconfdir}/ntp.conf for ntptime command (#26250) * Mon Feb 5 2001 Preston Brown - start earlier and stop later (#23530) * Mon Feb 5 2001 Bernhard Rosenkraenzer - i18nize init script (#26078) * Sat Jan 6 2001 Jeff Johnson - typo in ntp.conf (#23173). * Mon Dec 11 2000 Karsten Hopp - rebuilt to fix permissions of /usr/share/doc/ntp-xxx * Thu Nov 2 2000 Jeff Johnson - correct mis-spellings in ntpq.htm (#20007). * Thu Oct 19 2000 Jeff Johnson - add %%ghost %%{_sysconfdir}/ntp/drift (#15222). * Wed Oct 18 2000 Jeff Johnson - comment out default values for keys, warn about starting with -A (#19316). - take out -A from ntpd startup as well. - update to 4.0.99k. * Wed Aug 23 2000 Jeff Johnson - use vsnprintf rather than vsprintf (#16676). * Mon Aug 14 2000 Jeff Johnson - remove Conflicts: so that the installer is happy. * Tue Jul 25 2000 Jeff Johnson - workaround glibc-2.1.90 lossage for now. * Thu Jul 20 2000 Bill Nottingham - move initscript back * Wed Jul 12 2000 Prospector - automatic rebuild * Mon Jun 26 2000 Preston Brown - move and update init script, update post/preun/postun scripts * Wed Jun 21 2000 Preston Brown - noreplace ntp.conf,keys files * Mon Jun 12 2000 Jeff Johnson - Create 4.0.99j package. - FHS packaging.