lp:debian/lenny/ntp
- Get this branch:
- bzr branch lp:debian/lenny/ntp
Branch information
- Owner:
- Ubuntu branches
- Status:
- Development
Recent revisions
- 7. By Nico Golde <email address hidden>
-
* Non-maintainer upload by the Security Team.
* Do not acknowledge incorrect mode 7 requests or mode 7 error responses
anymore as well as adding a wait timer for logging as this might result
in severe DoS and request/response ping-pong on spoofed source addresses
(CVE-2009-3563). - 5. By Kurt Roeckx
-
It did not properly check the return value of EVP_VerifyFinal
which results in an malformed DSA signature being treated as
a good signature rather than as an error. (CVE-2009-0021) - 4. By Martin Pitt
-
* ntpd/ntpd.c:
- Revert the hardcoded root dropping parameters from previous version.
This is now done in init script.
- Bugfix: If group was specified as name, previous versions erroneously
used the uid as gid.
* debian/ntp-server. init.d:
- Run as user/group ntp by default (previously hardcoded in ntpd.c).
- Already determine the uid/gid of 'ntp' instead of doing it in ntpd.c
(for some reason this fails directly after boot). (Ubuntu #5399)
- Add -e to interpreter to stop on errors.
- append "/usr/bin/" to PATH setting (for getent and cut).
Branch metadata
- Branch format:
- Branch format 7
- Repository format:
- Bazaar repository format 2a (needs bzr 1.16 or later)
- Stacked on:
- lp:debian/squeeze/ntp