Sophie

• Search
• Distribution
• Explorer
• Source & Patches
• Chat
• Help
• About

distrib > Mageia > 5 > x86_64 > media > core-updates-src > by-pkgid > b0a67510b4ada7650a9c82a475b5a025 > changelog

ntp-4.2.6p5-24.4.mga5.src.rpm

• Info
• Deps
• Files
• Scripts
• ChangeLog
• Location
• Others versions
• Analyse

• Mon Jan 25 2016 luigiwalser <luigiwalser> 4.2.6p5-24.4.mga5

  + Revision: 927119
  - rename CVE-2015-5196 to CVE-2015-7703
  - fix CVE-2015-7692 patch name
  - add patches from fedora to fix several bugs and security issues:
  - report clock state changes related to leap seconds
  - allow -4/-6 on restrict lines with mask
  - explain synchronised state in ntpstat man page
  - don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
  - fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)
  - fix infinite loop in ntpq/ntpdc (CVE-2015-8158)
  - check key ID in packets authenticated with symmetric key (CVE-2015-7974)
  - don't allow spoofed packets to demobilize associations using symmetric key
  (CVE-2015-7979)
  - add patches from ubuntu to fix CVE-2015-785[035]
  - sync with fedora to fix October 2015 security issues:
  - check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
  - allow only one step larger than panic threshold with -g (CVE-2015-5300)
  - fix memory leak with autokey (CVE-2015-7701)
  - don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
  CVE-2015-7702)
  - don't crash in ntpq with crafted packet (CVE-2015-7852)
  - don't mobilize passive association with crypto NAK (CVE-2015-7871)
  - add patches from fedora to fix CVE-2015-5146, CVE-2015-519[4-6], CVE-2015-5219

• Wed Apr 8 2015 oden <oden> 4.2.6p5-24.mga5

  + Revision: 819877
  - P30: security fix for CVE-2015-1798
  - P31: security fix for CVE-2015-1799

• Sat Feb 28 2015 alien <alien> 4.2.6p5-23.mga5

  + Revision: 817214
  - New configurations are advised to use Orphan mode instead of local clocks

• Tue Feb 10 2015 luigiwalser <luigiwalser> 4.2.6p5-22.mga5

  + Revision: 814542
  - do not restrict ntpq from localhost

• Fri Feb 6 2015 luigiwalser <luigiwalser> 4.2.6p5-21.mga5

  + Revision: 813679
  - add patches from fedora to fix CVE-2014-9297 and CVE-2014-9298

• Sat Dec 20 2014 luigiwalser <luigiwalser> 4.2.6p5-20.mga5

  + Revision: 804330
  - link to openssl to fix build with CVE-2014-9294 patch
  - add patches from fedora to fix CVE-2014-929[3-6]

• Wed Oct 15 2014 umeabot <umeabot> 4.2.6p5-17.mga5

  + Revision: 748582
  - Second Mageia 5 Mass Rebuild

• Tue Sep 16 2014 umeabot <umeabot> 4.2.6p5-16.mga5

  + Revision: 682949
  - Mageia 5 Mass Rebuild

• Thu Jan 23 2014 luigiwalser <luigiwalser> 4.2.6p5-15.mga4

  + Revision: 567555
  - restrict some remote query types by default to mitigate CVE-2013-5211 (mga#12326)

• Sat Nov 23 2013 colin <colin> 4.2.6p5-14.mga4

  + Revision: 552447
  - Remove legacy directive from service unit

• Sat Oct 19 2013 umeabot <umeabot> 4.2.6p5-13.mga4

  + Revision: 522749
  - Mageia 4 Mass Rebuild

• Tue Mar 26 2013 tv <tv> 4.2.6p5-12.mga3

  + Revision: 405373
  - make doc subpackage noarch

• Tue Feb 26 2013 colin <colin> 4.2.6p5-11.mga3

  + Revision: 400393
  - Revert (most of) r397878. ntpd -q does not behave like ntpdate at all.

• Mon Feb 11 2013 colin <colin> 4.2.6p5-10.mga3

  + Revision: 397879
  - Tidy unit paths
  - Drop the ntpdate service (unneeded due to -g option to ntpd)