lp://staging/ubuntu/dapper-updates/ntp
- Get this branch:
- bzr branch lp://staging/ubuntu/dapper-updates/ntp
Branch merges
Branch information
Recent revisions
- 14. By Jamie Strandboge
-
* SECURITY UPDATE: fix DoS with mode 7 (MODE_PRIVATE) packets
- update ntpd/ntp_request.c to not send a response packet for and rate
limit logging of invalid mode 7 requests and responses
- CVE-2009-3563 - 13. By Jamie Strandboge
-
* SECURITY UPDATE: stack overflow in ntpd when autokey is enabled
- update ntpd/ntp_crypto.c to use snprintf() with NTP_MAXSTRLEN when
writing to statstr. Also defensively adjust ntp_peer.c and ntp_timer.c
to do the same.
- CVE-2009-1252
* SECURITY UPDATE: stack overflow in ntpq when contacting malicious ntp
server
- increase size of buffer in cookedprint() in ntpq/ntpq.c and adjust to
use snprintf()
- CVE-2009-0159 - 12. By Jamie Strandboge
-
* SECURITY UPDATE: clients treat malformed signatures as good when verifying
server DSA and ECDSA certificates.
- update ntpd/ntp_crypto.c to properly check the return code of
EVP_VerifyFinal( )
- CVE-2009-0021 - 11. By Adam Conrad
-
Call dh_installinit with --error-
handler= true, which will prevent
ntp-server's prerm and postinst from bombing out on upgrades from
previous broken versions. ntp-{simple,refclock} still try to
restart the server in their postinst, so it won't be left dead. - 10. By Adam Conrad
-
Attempt to create the ntp user in ntp-server's postinst, as the
dependency loops between ntp-server and ntp-means we have no
way of knowing which gets configured first (launchpad.net/33351) - 8. By Scott James Remnant (Canonical)
-
Ignore errors from ntpdate, otherwise the interface might not come
fully up. - 7. By Scott James Remnant (Canonical)
-
Remove ntpdate init script, instead install a script in
/etc/network/if-up.d that sets the clock whenever we bring up a network
interface. - 6. By Colin Watson
-
* Resynchronise with Debian.
* Use ntp.ubuntu.com rather than ntp.ubuntulinux.org.
Branch metadata
- Branch format:
- Branch format 7
- Repository format:
- Bazaar repository format 2a (needs bzr 1.16 or later)
- Stacked on:
- lp://staging/ubuntu/karmic/ntp