Mon Mar 25 17:19:59 2019 UTC ()
ntp4: update to ntp-4.2.8p13

NTP 4.2.8p13 2019-03-07
This release fixes a bug that allows an attacker with access to an
explicitly trusted source to send a crafted malicious mode 6 (ntpq)
packet that can trigger a NULL pointer dereference, crashing ntpd.
It also provides 17 other bugfixes and 1 other improvement.

NTP 4.2.8p12 2018-04-09
This release fixes a "hole" in the noepeer capability introduced to ntpd
in ntp-4.2.8p11, and a buffer overflow in the openhost() function used by
ntpq and ntpdc.  It also provides 26 other bugfixes, and 4 other improvements.

NTP 4.2.8p11 2018-02-27
This release fixes 2 low-/medium-, 1 informational/medum-, and 2 low-severity
vulnerabilities in ntpd, one medium-severity vulernability in ntpq, and
provides 65 other non-security fixes and improvements.


(tnn)
diff -r1.99 -r1.100 pkgsrc/net/ntp4/Makefile
diff -r1.29 -r1.30 pkgsrc/net/ntp4/distinfo
cvs diff -r1.99 -r1.100 pkgsrc/net/ntp4/Makefile (expand / switch to unified diff)

--- pkgsrc/net/ntp4/Makefile 2018/08/22 09:45:56 1.99
+++ pkgsrc/net/ntp4/Makefile 2019/03/25 17:19:59 1.100
@@ -1,19 +1,18 @@ @@ -1,19 +1,18 @@
1# $NetBSD: Makefile,v 1.99 2018/08/22 09:45:56 wiz Exp $ 1# $NetBSD: Makefile,v 1.100 2019/03/25 17:19:59 tnn Exp $
2# 2#
3 3
4DISTNAME= ntp-4.2.8p10 4DISTNAME= ntp-4.2.8p13
5PKGNAME= ${DISTNAME:S/-dev-/-/} 5PKGNAME= ${DISTNAME:S/-dev-/-/}
6PKGREVISION= 1 
7CATEGORIES= net time 6CATEGORIES= net time
8MASTER_SITES= http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2/ 7MASTER_SITES= http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2/
9 8
10MAINTAINER= pkgsrc-users@NetBSD.org 9MAINTAINER= pkgsrc-users@NetBSD.org
11HOMEPAGE= http://www.ntp.org/ 10HOMEPAGE= http://www.ntp.org/
12COMMENT= Network Time Protocol Version 4 11COMMENT= Network Time Protocol Version 4
13 12
14CONFLICTS+= openntpd-[0-9]* 13CONFLICTS+= openntpd-[0-9]*
15 14
16GNU_CONFIGURE= YES 15GNU_CONFIGURE= YES
17USE_LIBTOOL= YES 16USE_LIBTOOL= YES
18USE_TOOLS+= pax perl:run 17USE_TOOLS+= pax perl:run
19 18
cvs diff -r1.29 -r1.30 pkgsrc/net/ntp4/distinfo (expand / switch to unified diff)

--- pkgsrc/net/ntp4/distinfo 2017/03/24 03:41:08 1.29
+++ pkgsrc/net/ntp4/distinfo 2019/03/25 17:19:59 1.30
@@ -1,8 +1,8 @@ @@ -1,8 +1,8 @@
1$NetBSD: distinfo,v 1.29 2017/03/24 03:41:08 taca Exp $ 1$NetBSD: distinfo,v 1.30 2019/03/25 17:19:59 tnn Exp $
2 2
3SHA1 (ntp-4.2.8p10.tar.gz) = 503d68cfd3e6a9354e0e28dd38b39d850b1228b2 3SHA1 (ntp-4.2.8p13.tar.gz) = cff200a987d64e891fb349a22313ecb0feaea090
4RMD160 (ntp-4.2.8p10.tar.gz) = c341340b93a5e1b5d88621a9e9d7eb6551f26c5e 4RMD160 (ntp-4.2.8p13.tar.gz) = 5d85e2a01bafa0bb755ab49e462f6dd7f96ce3d0
5SHA512 (ntp-4.2.8p10.tar.gz) = 67e01ab533c3dfabb0bdd3ced848bdd239980bde28fdb2791d167b7e9690ab3b3759e1bd99e9fddcce03ddef4cd63a47eb85941bb127ceb79b7ecff22cce9c05 5SHA512 (ntp-4.2.8p13.tar.gz) = afbdbb8a37b8f4040a8a6939a3a85ad0350d359c153c297b32b8a013c7b7061fd925fa3e6e103671c5901e169156e22497813c654195ba50f890a7170b2f2075
6Size (ntp-4.2.8p10.tar.gz) = 6998648 bytes 6Size (ntp-4.2.8p13.tar.gz) = 6949363 bytes
7SHA1 (patch-include-ntp__syscall.h) = b247569339d09a88f2e143e355033ce7635ffe92 7SHA1 (patch-include-ntp__syscall.h) = b247569339d09a88f2e143e355033ce7635ffe92
8SHA1 (patch-sntp_loc_pkgsrc) = 6e46ffc0cc2afcfdc1d01297cbe04cb80d103575 8SHA1 (patch-sntp_loc_pkgsrc) = 6e46ffc0cc2afcfdc1d01297cbe04cb80d103575