Sophie

• Search
• Distribution
• Explorer
• Source & Patches
• Chat
• Help
• About

distrib > Mageia > 6 > armv7hl > media > core-updates-src > by-pkgid > 04b4eb8e474d5b6188a816a657ab144c > changelog

ntp-4.2.8p12-1.mga6.src.rpm

• Info
• Deps
• Files
• Scripts
• ChangeLog
• Location
• Others versions
• Analyse

• Wed Sep 5 2018 ns80 <ns80> 4.2.8p12-1.mga6

  (not released yet)
  + Revision: 1257275
  - new version 4.2.8p12 for CVE-2018-12327 (mga#23505)
  + zezinho
  - sync forgotten SOURCES files with cauldron mga#22978
  - remove pps-tools dep as it was not in MGA6
  - new version 4.2.8p11 fixes security bug MGA#22850

• Wed Mar 29 2017 luigiwalser <luigiwalser> 4.2.6p5-33.mga6

  + Revision: 1095163
  - add patches from fedora to fix security issues:
  - fix crash with invalid unpeer command (CVE-2017-6463)
  - fix buffer overflow in datum refclock driver (CVE-2017-6462)
  - fix potential buffer overflow in mx4200 refclock driver (CVE-2017-6451)
  - fix potential buffer overflows in formatting of ntpq responses
  (CVE-2017-6458)
  - fix potential crash with invalid server command (CVE-2017-6464)
  - update patches from fedora to fix bugs:
  - fix CVE-2016-7429 patch to work correctly on multicast client
  - fix typos in ntpd man page (#1434755)

• Fri Nov 25 2016 luigiwalser <luigiwalser> 4.2.6p5-32.mga6

  + Revision: 1070155
  - add patches from fedora to fix security issues:
  - don't limit rate of packets from sources (CVE-2016-7426)
  - don't change interface from received packets (CVE-2016-7429)
  - require authentication for trap commands (CVE-2016-9310)
  - fix crash when reporting peer event to trappers (CVE-2016-9311)

• Fri Jun 3 2016 luigiwalser <luigiwalser> 4.2.6p5-31.mga6

  + Revision: 1020184
  - add patches from fedora to fix more security issues:
  - CVE-2015-8139
  - CVE-2016-4954
  - CVE-2016-4955
  - CVE-2016-4956

• Thu May 12 2016 luigiwalser <luigiwalser> 4.2.6p5-30.mga6

  + Revision: 1014159
  - add patches from fedora to fix more bugs and security issues:
  - update reference timestamp in orphan mode
  - allow sources specified by IPv6 link-local address
  - don't allow spoofed packet to enable symmetric interleaved mode
  (CVE-2016-1548)
  - don't crash on duplicate address in unconfig command (CVE-2016-2516)
  - check mode of new source in config command (CVE-2016-2518)
  - make MAC check resilient against timing attack (CVE-2016-1550)

• Mon Jan 25 2016 luigiwalser <luigiwalser> 4.2.6p5-28.mga6

  + Revision: 927118
  - rename CVE-2015-5196 to CVE-2015-7703
  - fix CVE-2015-7692 patch name
  - add patches from fedora to fix several bugs and security issues:
  - report clock state changes related to leap seconds
  - allow -4/-6 on restrict lines with mask
  - explain synchronised state in ntpstat man page
  - don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
  - fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)
  - fix infinite loop in ntpq/ntpdc (CVE-2015-8158)
  - check key ID in packets authenticated with symmetric key (CVE-2015-7974)
  - don't allow spoofed packets to demobilize associations using symmetric key
  (CVE-2015-7979)

• Wed Oct 28 2015 luigiwalser <luigiwalser> 4.2.6p5-27.mga6

  + Revision: 896075
  - add patches from ubuntu to fix CVE-2015-785[035]

• Thu Oct 22 2015 luigiwalser <luigiwalser> 4.2.6p5-26.mga6

  + Revision: 894253
  - sync with fedora to fix October 2015 security issues:
  - check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
  - allow only one step larger than panic threshold with -g (CVE-2015-5300)
  - fix memory leak with autokey (CVE-2015-7701)
  - don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
  CVE-2015-7702)
  - don't crash in ntpq with crafted packet (CVE-2015-7852)
  - don't mobilize passive association with crypto NAK (CVE-2015-7871)