Author: Joachim Wiedorn
Revision Date: 2015-04-10 11:41:31 UTC

* With the following security bugfixes (Closes: #782160):
  - Fix CVE-2015-1853: Protect authenticated symmetric NTP
                       associations against DoS attacks.
  - Fix CVE-2015-1821: Fix access configuration with subnet
                       size indivisible by 4.
  - Fix CVE-2015-1822: Fix initialization of reply slots for
                       authenticated commands.
* debian/control:
 - Update e-mail address of myself.
 - Add Vincent Blut as co-maintainer.

Author: Joachim Wiedorn
Revision Date: 2015-04-10 11:41:31 UTC

* With the following security bugfixes (Closes: #782160):
  - Fix CVE-2015-1853: Protect authenticated symmetric NTP
                       associations against DoS attacks.
  - Fix CVE-2015-1821: Fix access configuration with subnet
                       size indivisible by 4.
  - Fix CVE-2015-1822: Fix initialization of reply slots for
                       authenticated commands.
* debian/control:
 - Update e-mail address of myself.
 - Add Vincent Blut as co-maintainer.

Author: Joachim Wiedorn
Revision Date: 2014-08-10 19:10:35 UTC

* New upstream release with following bugfixes:
  - Fix crash when selecting with multiple preferred sources.
  - Fix frequency calculation with large frequency offsets.
  - Fix code writing drift and RTC files to compile correctly.
  - Fix -4/-6 options in chronyc to not reset hostname set by -h.
  - Fix refclock sample validation with sub-second polling interval.
  - Set stratum correctly with non-PPS SOCK refclock and local stratum.
  - Modify dispersion accounting in refclocks to prevent PPS getting
      stuck with large dispersion and not accepting new samples.
  - Move faq.txt (PHP style) to a plain text file FAQ. Closes: #415729

* Add gpg signature of upstream developer for use with uscan.
* Update debian/watch, add check of upstream gpg signature.
* Update all patches.

* Bugfix: Use /etc/adjtime in postinst script to recognize
    UTC hardware clock. Closes: #680498
* Use logrotate instead of cron script. Closes: #323966
* debian/rules: disable test simulation.

* debian/control: remove obsolete build dependency to dpkg-dev.
* debian/install, debian/dirs, debian/clean: Update.
* debian/copyright: Update and add entries.

Author: Joachim Wiedorn
Revision Date: 2014-08-10 19:10:35 UTC

* New upstream release with following bugfixes:
  - Fix crash when selecting with multiple preferred sources.
  - Fix frequency calculation with large frequency offsets.
  - Fix code writing drift and RTC files to compile correctly.
  - Fix -4/-6 options in chronyc to not reset hostname set by -h.
  - Fix refclock sample validation with sub-second polling interval.
  - Set stratum correctly with non-PPS SOCK refclock and local stratum.
  - Modify dispersion accounting in refclocks to prevent PPS getting
      stuck with large dispersion and not accepting new samples.
  - Move faq.txt (PHP style) to a plain text file FAQ. Closes: #415729

* Add gpg signature of upstream developer for use with uscan.
* Update debian/watch, add check of upstream gpg signature.
* Update all patches.

* Bugfix: Use /etc/adjtime in postinst script to recognize
    UTC hardware clock. Closes: #680498
* Use logrotate instead of cron script. Closes: #323966
* debian/rules: disable test simulation.

* debian/control: remove obsolete build dependency to dpkg-dev.
* debian/install, debian/dirs, debian/clean: Update.
* debian/copyright: Update and add entries.

Author: Joachim Wiedorn
Revision Date: 2014-02-06 15:51:47 UTC

* New upstream release with bugfix:
  - Closes: #737644: Fixing vulnerability:
      CVE-2014-0021 - traffic amplification in cmdmon protocol
      (incompatible with previous protocol version, but chronyc
      supports both).

Author: Joachim Wiedorn
Revision Date: 2014-02-06 15:51:47 UTC

* New upstream release with bugfix:
  - Closes: #737644: Fixing vulnerability:
      CVE-2014-0021 - traffic amplification in cmdmon protocol
      (incompatible with previous protocol version, but chronyc
      supports both).

Author: Joachim Wiedorn
Revision Date: 2013-12-20 23:35:25 UTC

* New upstream release with some bugfixes:
  - Closes: #719132: new upstream version, fixes security bugs.
  - Closes: #719203: Fixing vulnerabilities:
      CVE-2012-4502 - Buffer overflow,
      CVE-2012-4503 - Uninitialized data.

* debian/control:
  - Set myself as new maintainer. Closes: #705768
  - Bump to Standards-Version 3.9.5.
  - Move to debhelper >= 9 and compat level 9.
  - Update package descriptions.
  - Add Vcs fields to new git repository.
  - Add dependency to lsb-base (for init script).
  - Add build dependency to libtomcrypt-dev.
* Move to source format 3.0 (quilt).
* Add the following patch files: (Closes: #637514)
  - 01_fix-small-typo-in-manpages
  - 03_recreate-always-getdate-c
  - 04_do-not-look-for-ncurses (Closes: #646732)
  - 05_disable-installation-of-license
* debian/rules:
  - Move to dh-based rules file.
  - Enable parallel builds.

* Add debian/watch file.
* Full update of debian/copyright file.
* Add debian/doc-base file.
* Full update of debian/README.Debian file.
* Update debian/postinst, debian/postrm, debian/prerm.
* Remove obsolete debian/preinst. Reduce mailing within postinst.
* Do not use old md5sum file anymore for ucf in postinst script.
* Add status action in init script (debian/init). Closes: #652207
* Add debian/install file for installing example of chrony.conf.
* Reduce debian/dirs file for use with debhelper 9.

Author: Joachim Wiedorn
Revision Date: 2013-12-20 23:35:25 UTC

* New upstream release with some bugfixes:
  - Closes: #719132: new upstream version, fixes security bugs.
  - Closes: #719203: Fixing vulnerabilities:
      CVE-2012-4502 - Buffer overflow,
      CVE-2012-4503 - Uninitialized data.

* debian/control:
  - Set myself as new maintainer. Closes: #705768
  - Bump to Standards-Version 3.9.5.
  - Move to debhelper >= 9 and compat level 9.
  - Update package descriptions.
  - Add Vcs fields to new git repository.
  - Add dependency to lsb-base (for init script).
  - Add build dependency to libtomcrypt-dev.
* Move to source format 3.0 (quilt).
* Add the following patch files: (Closes: #637514)
  - 01_fix-small-typo-in-manpages
  - 03_recreate-always-getdate-c
  - 04_do-not-look-for-ncurses (Closes: #646732)
  - 05_disable-installation-of-license
* debian/rules:
  - Move to dh-based rules file.
  - Enable parallel builds.

* Add debian/watch file.
* Full update of debian/copyright file.
* Add debian/doc-base file.
* Full update of debian/README.Debian file.
* Update debian/postinst, debian/postrm, debian/prerm.
* Remove obsolete debian/preinst. Reduce mailing within postinst.
* Do not use old md5sum file anymore for ucf in postinst script.
* Add status action in init script (debian/init). Closes: #652207
* Add debian/install file for installing example of chrony.conf.
* Reduce debian/dirs file for use with debhelper 9.

Author: Colin Watson
Revision Date: 2013-07-08 18:00:45 UTC

* QA upload.
* Depend on net-tools, for netstat (closes: #707260).

Author: Colin Watson
Revision Date: 2013-07-08 18:00:45 UTC

* QA upload.
* Depend on net-tools, for netstat (closes: #707260).

Author: John G. Hasler
Revision Date: 2012-07-01 22:05:56 UTC

* Fixed Makefile.in so that getdate.c gets made (and removed
  in "clean"). This will go upstream. Moved faq stuff in rules
  from binary-indep to binary-arch.
* Restored accidently deleted nmu changelog entry.

* Applied patch from Moritz Muehlenhoff <jmm@debian.org>
  Closes: #655123 Please enabled hardened build flags

* Fixed upstream.
  Closes: #518385 Chrony segfaults on startup (narrowed down to
  chronyc and "burst")

* Added DEB_BUILD_OPTIONS=noopt to rules.
  Added build-arch and build-indep to rules.
  Prefix is now 'usr'.
  Changed to dh_installman.
  Fixed "clean:" target.
  Closes: #479389 Improvements for debian/rules

* Fixed upstream.
  Closes: #195620 Strange "System time : xxx seconds slow of NTP time"
  output

* Upstream changes should have fixed this.
  Closes:#294030 chronyd makes the whole system briefly (< 1 second)
  freeze

* Fixed by upstream changes and new LSB headers.
  Closes: #407466 Chrony won't access hardware clock but prevents
  hwclock from doing so either

Author: John G. Hasler
Revision Date: 2012-07-01 22:05:56 UTC

* Fixed Makefile.in so that getdate.c gets made (and removed
  in "clean"). This will go upstream. Moved faq stuff in rules
  from binary-indep to binary-arch.
* Restored accidently deleted nmu changelog entry.

* Applied patch from Moritz Muehlenhoff <jmm@debian.org>
  Closes: #655123 Please enabled hardened build flags

* Fixed upstream.
  Closes: #518385 Chrony segfaults on startup (narrowed down to
  chronyc and "burst")

* Added DEB_BUILD_OPTIONS=noopt to rules.
  Added build-arch and build-indep to rules.
  Prefix is now 'usr'.
  Changed to dh_installman.
  Fixed "clean:" target.
  Closes: #479389 Improvements for debian/rules

* Fixed upstream.
  Closes: #195620 Strange "System time : xxx seconds slow of NTP time"
  output

* Upstream changes should have fixed this.
  Closes:#294030 chronyd makes the whole system briefly (< 1 second)
  freeze

* Fixed by upstream changes and new LSB headers.
  Closes: #407466 Chrony won't access hardware clock but prevents
  hwclock from doing so either

Author: Bhavani Shankar
Revision Date: 2011-10-23 20:39:12 UTC

Fix -Werror=format-security issues

Author: Michael Bienia
Revision Date: 2011-06-12 15:18:21 UTC

* Support Linux 3.0 and later (patch taken from upstream;
  commit ec7d302a6ca9e7974a05d338267b40491a1d7abb)
  (lp: #793387, closes: #628919)
* Drop libreadline5-dev from Build-Depends (use libreadline-dev).

Author: John G. Hasler
Revision Date: 2010-09-14 10:06:47 UTC

Applied (modifed) patch from Gregor Herrmann.

Closes: #593145: fails to configure on installation
Closes: #552162: chrony incorrectly thinks that it has failed to
(re)start
Closes: #592930: invoke-rc.d: initscript chrony, action "start" failed.

Author: John G. Hasler
Revision Date: 2010-09-14 10:06:47 UTC

Applied (modifed) patch from Gregor Herrmann.

Closes: #593145: fails to configure on installation
Closes: #552162: chrony incorrectly thinks that it has failed to
(re)start
Closes: #592930: invoke-rc.d: initscript chrony, action "start" failed.

Author: Jamie Strandboge
Revision Date: 2010-02-12 12:34:19 UTC

fake sync from Debian

Author: Jamie Strandboge
Revision Date: 2010-02-12 12:34:19 UTC

fake sync from Debian

Author: Jamie Strandboge
Revision Date: 2010-02-12 12:34:07 UTC

fake sync from Debian

Author: Jamie Strandboge
Revision Date: 2010-02-12 12:34:07 UTC

fake sync from Debian

Author: Jamie Strandboge
Revision Date: 2010-02-12 12:29:55 UTC

fake sync from Debian

Author: Jamie Strandboge
Revision Date: 2010-02-12 12:29:55 UTC

fake sync from Debian

Author: John G. Hasler
Revision Date: 2010-02-02 19:37:50 UTC

Applied patches from upstream to fix remote DOS:

CVE-2010-0292 Don't reply to invalid cmdmon packets

CVE-2010-0293 Limit client log memory size

CVE-2010-0294 Limit rate of syslog messages

Author: John Hasler
Revision Date: 2008-12-10 14:16:37 UTC

* Commented out rtcfile directive in chrony.conf because it can cause
  lockups with certain combinations of motherboard and kernel (this is
  a known kernel bug).

  Closes: #508298: chronyd unreachable and does not work (clock drifts)

* Chrony no longer uses the ppp/ip-up.d and ppp/ip-up.d files and the new
  init.d file won't hang if chronyc hangs.

  Closes: #448481: /etc/ppp/ip-up.d/chrony doesn't work when bindaddress is set.

* Cannot reproduce on current version on amd64.

  Closes: #412961: error in tracking report (on amd64?)

Author: John Hasler
Revision Date: 2008-04-26 11:47:44 UTC

* Rewrote UTI_NormaliseTimeval()in util.c to use divide/remainder
  instead of loops at the suggestion of Gabor Gombas. This prevents the
  problem of the loop running until the sun goes out when the function
  is called with a very large value for tv_usec on 64-bit architectures.
  Also fixed some other spots where the same loop was being used.

  Closes: #474294 Goes into endless loop
  Closes: #447011 chronyd stalls with 100% CPU usage

  I still don't know why the function is being called with such a
  large value, however.

* Changed default servers in chrony,conf to Debian servers.

  Closes: #434483: chrony: Should use NTP servers in Debian pool

Author: John Hasler
Revision Date: 2006-11-26 08:07:20 UTC

* Applied postinst patch from Lionel Elie Mamane to test for the
  existence of old .keys and .conf files before renaming them.
  Closes: #397759: fails to configure: mv: cannot stat `/etc/chrony/chrony.keys.1.21-2':
  No such file or directory

* Added burst command to /etc/ppp/ip-up.d/chrony to give chronyd a kick in the butt.
  Shouldn't need that, though.
  Initscript now calls /etc/ppp/ip-up.d/chrony if a default route exists.
  Closes: #397739: Not connecting to sources after reboot - dialup

Author: John Hasler
Revision Date: 2006-11-26 08:07:20 UTC

* Applied postinst patch from Lionel Elie Mamane to test for the
  existence of old .keys and .conf files before renaming them.
  Closes: #397759: fails to configure: mv: cannot stat `/etc/chrony/chrony.keys.1.21-2':
  No such file or directory

* Added burst command to /etc/ppp/ip-up.d/chrony to give chronyd a kick in the butt.
  Shouldn't need that, though.
  Initscript now calls /etc/ppp/ip-up.d/chrony if a default route exists.
  Closes: #397739: Not connecting to sources after reboot - dialup

Author: John Hasler
Revision Date: 2006-11-26 08:07:20 UTC

* Applied postinst patch from Lionel Elie Mamane to test for the
  existence of old .keys and .conf files before renaming them.
  Closes: #397759: fails to configure: mv: cannot stat `/etc/chrony/chrony.keys.1.21-2':
  No such file or directory

* Added burst command to /etc/ppp/ip-up.d/chrony to give chronyd a kick in the butt.
  Shouldn't need that, though.
  Initscript now calls /etc/ppp/ip-up.d/chrony if a default route exists.
  Closes: #397739: Not connecting to sources after reboot - dialup

Author: John Hasler
Revision Date: 2005-11-19 10:12:49 UTC

* Patched io_linux.h to add missing architectures.
  Closes: #339764: chrony - FTBFS: #error "I don't know the values of the
  _IOC_* constants for your architecture"

* Fixed brown-bag error in rules.
  Closes: #339853: /usr/sbin/chronyd is missing

Author: John Hasler
Revision Date: 2005-11-19 10:12:49 UTC

* Patched io_linux.h to add missing architectures.
  Closes: #339764: chrony - FTBFS: #error "I don't know the values of the
  _IOC_* constants for your architecture"

* Fixed brown-bag error in rules.
  Closes: #339853: /usr/sbin/chronyd is missing

Author: John Hasler
Revision Date: 2005-04-30 18:47:30 UTC

* Added test for /usr/bin/mail in postinst.
  Closes: #307061: Install failure: Cannot configure on system without mailx
  I consider this bug serious because it can cause installation to fail
  and so I want to get the fix into Sarge.

* Fixed typo in chrony.conf, replaced '/etc/init.d/chrony restart'
  with 'invoke-rc.d chrony restart'.
  Closes: #305090: Typo in chrony.conf, should mention invoke-rc.d

* Added README.Debian explaining that rtc is off by default.

Author: John Hasler
Revision Date: 2004-12-04 17:47:31 UTC

* Fixed error in chrony.conf where the non-existent 'online' directive
  was mentioned.
  Closes: #257235 misleading instructions in chrony.conf

* Patched Makefile.in to generate faq.html.
  Closes: #265936 /usr/share/doc/chrony/faq.txt.gz: how to read?

Author: John Hasler
Revision Date: 2004-04-10 22:00:00 UTC

* Put pool.ntp.org servers in chrony.conf as defaults.

* Fixed erroneous references to chronyd(1) in some man pages.
  Closes: #241746 SEE ALSO chronyd(1) should be (8)

* I got a new motherboard and can no longer reproduce this.
  If you can please reopen the bug.
  Closes: #223518 Rtc stuff is broken

* Edited chrony.conf(5).
  Closes: #241745 many more features have been added

* Edited chrony.conf to add logchange and mailonchange and to
  enable rtc by default.
  Closes: #226644 /etc/chrony/chrony.conf: rtc; not all options are noted in conf file

* Fixed upstream: see NEWS.
  Closes: #124089 mistake in the chrony manual
  Closes: #177366: trailing blank on log lines
  Closes: #195618 failure to use /dev/misc/rtc floods logfiles
  Closes: #53066 "acquisitionport" directive and doc fixes [patch]
  Closes: #100880 RFE: don't use /proc when uname(2) will do
  Closes: #163470: different bindaddresses for ntp port and control port
  Closes: #200174: Chrony breaks under Kernel 2.5 (two bugs)

Author: John Hasler
Revision Date: 2008-12-10 14:16:37 UTC

* Commented out rtcfile directive in chrony.conf because it can cause
  lockups with certain combinations of motherboard and kernel (this is
  a known kernel bug).

  Closes: #508298: chronyd unreachable and does not work (clock drifts)

* Chrony no longer uses the ppp/ip-up.d and ppp/ip-up.d files and the new
  init.d file won't hang if chronyc hangs.

  Closes: #448481: /etc/ppp/ip-up.d/chrony doesn't work when bindaddress is set.

* Cannot reproduce on current version on amd64.

  Closes: #412961: error in tracking report (on amd64?)