lp:debian/ntp

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

25. By Kurt Roeckx on 2015-10-21

* New upstream release.
  - Fixes CVE-2015-7850 CVE-2015-7704 CVE-2015-7701 CVE-2015-5196
    CVE-2015-7848 CVE-2015-7849 CVE-2015-7854 CVE-2015-7852 CVE-2015-7853
    CVE-2015-7851 CVE-2015-7705 CVE-2015-7855 CVE-2015-7871
  - Drop format-security.patch, applied upstream.

24. By Kurt Roeckx on 2015-07-25

* New upstream version
 - Patches applied upstream: ntpd-linux-caps-inheritable.patch,
   ntp-4.2.6p5-cve-2014-9293.patch, ntp-4.2.6p5-cve-2014-9294.patch,
   ntp-4.2.6p5-cve-2014-9295.patch, ntp-4.2.6p5-cve-2014-9296.patch,
   CVE-2014-9297.patch, CVE-2014-9298.patch, CVE-2015-1798.patch,
   CVE-2015-1799.patch, bug-2797.patch, ntpd-ni-maxhost.patch,
   format-security.patch, sntp-manpage.patch, openssl-headers.patch
* Remove autotools.patch since we run dh_autoreconf
* Fix a new issue reported by -Werror=format-security
* Adjust location in source file for ntpsweep
* Upstream doesn't ship ntpsnmpd.1 anymore, so don't remove it
* Update the default config to use the new pool method:
  - Use pool instead of server
  - Add restrict source line so servers can be added and removed
  - Add an rlimit memlock so that ntpd actually starts
* Change the default restrict line to have a rate limit
* Remove empty directory /usr/libexec
* Prevent rpaths being set for all binaries
* Install files to debian/tmp and use dh_install instead of dh_movefiles

23. By Kurt Roeckx on 2015-04-10

Fix endless loop and non-random key generation using
ntp-keygen on big endian machines.

22. By Kurt Roeckx on 2015-04-10

Fix CVE-2015-1798 and CVE-2015-1799 (Closes: #782095)

21. By Kurt Roeckx on 2015-02-07

Add missing fix for CVE-2014-9297

20. By Kurt Roeckx on 2015-02-05

* Fix CVE-2014-9297
* Fix CVE-2014-9298

19. By Noah Meyerhans on 2014-12-21

* Non-maintainer upload.
* Apply fixes for security updates (Closes: 773576)
  - cve-2014-9293
  - cve-2014-9294
  - cve-2014-9295
  - cve-2014-9296

18. By Wookey on 2014-07-15

* Non-maintainer upload.
* Use dh-autoreconf to ensure configurey is updated for new architectures

17. By Kurt Roeckx on 2013-05-20

Look for <openssl/opensslv.h> rather than <openssl/opensslconf.h>, which
is due to move to a different location in order to support multiarch.
Patch by Colin Watson <email address hidden> (Closes: #696390)

16. By Peter Eisentraut on 2012-05-12

Re-enable crypto support by pointing openssl libdir to multiarch dir.
Also increase libssl-dev build dependency to the first multiarch
version. (closes: #670662)