svn commit: r48891 - in head/share: security/advisories security/patches/SA-16:24 xml
Xin LI <[email protected]>
| Newsgroups | gmane.os.freebsd.devel.cvs.doc |
|---|---|
| Message-ID | <[email protected]> |
Author: delphij Date: Sat Jun 4 06:51:08 2016 New Revision: 48891 URL: https://svnweb.freebsd.org/changeset/doc/48891 Log: Add SA-16:24.ntp. Added: head/share/security/advisories/FreeBSD-SA-16:24.ntp.asc (contents, props changed) head/share/security/patches/SA-16:24/ head/share/security/patches/SA-16:24/ntp.patch (contents, props changed) head/share/security/patches/SA-16:24/ntp.patch.asc (contents, props changed) Modified: head/share/xml/advisories.xml Added: head/share/security/advisories/FreeBSD-SA-16:24.ntp.asc ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/advisories/FreeBSD-SA-16:24.ntp.asc Sat Jun 4 06:51:08 2016 (r48891) @@ -0,0 +1,172 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + +============================================================================= +FreeBSD-SA-16:24.ntp Security Advisory + The FreeBSD Project + +Topic: Multiple vulnerabilities of ntp + +Category: contrib +Module: ntp +Announced: 2016-06-04 +Credits: Network Time Foundation and various contributors listed below +Affects: All supported versions of FreeBSD. +Corrected: 2016-06-03 08:59:21 UTC (stable/10, 10.3-STABLE) + 2016-06-04 05:46:52 UTC (releng/10.3, 10.3-RELEASE-p5) + 2016-06-04 05:46:52 UTC (releng/10.2, 10.2-RELEASE-p19) + 2016-06-04 05:46:52 UTC (releng/10.1, 10.1-RELEASE-p36) + 2016-06-03 09:03:10 UTC (stable/9, 9.3-STABLE) + 2016-06-04 05:46:52 UTC (releng/9.3, 9.3-RELEASE-p44) +CVE Name: CVE-2016-4957, CVE-2016-4953, CVE-2016-4954, CVE-2016-4955 + CVE-2016-4956 + +For general information regarding FreeBSD Security Advisories, +including descriptions of the fields above, security branches, and the +following sections, please visit <URL:https://security.FreeBSD.org/>. + +I. Background + +The ntpd(8) daemon is an implementation of the Network Time Protocol (NTP) +used to synchronize the time of a computer system to a reference time +source. + +II. Problem Description + +Multiple vulnerabilities have been discovered in the NTP suite: + +The fix for Sec 3007 in ntp-4.2.8p7 contained a bug that could cause ntpd to +crash. [CVE-2016-4957, Reported by Nicolas Edet of Cisco] + +An attacker who knows the origin timestamp and can send a spoofed packet +containing a CRYPTO-NAK to an ephemeral peer target before any other +response is sent can demobilize that association. [CVE-2016-4953, Reported by +Miroslav Lichvar of Red Hat] + +An attacker who is able to spoof packets with correct origin timestamps +from enough servers before the expected response packets arrive at the +target machine can affect some peer variables and, for example, +cause a false leap indication to be set. [CVE-2016-4954, Reported by +Jakub Prokes of Red Hat] + +An attacker who is able to spoof a packet with a correct origin timestamp +before the expected response packet arrives at the target machine can +send a CRYPTO_NAK or a bad MAC and cause the association's peer variables +to be cleared. If this can be done often enough, it will prevent that +association from working. [CVE-2016-4955, Reported by Miroslav Lichvar +of Red Hat] + +The fix for NtpBug2978 does not cover broadcast associations, so broadcast +clients can be triggered to flip into interleave mode. [CVE-2016-4956, +Reported by Miroslav Lichvar of Red Hat.] + +III. Impact + +Malicious remote attackers may be able to break time synchronization, +or cause the ntpd(8) daemon to crash. + +IV. Workaround + +No workaround is available, but systems not running ntpd(8) are not +affected. Network administrators are advised to implement BCP-38, +which helps to reduce the risk associated with the attacks. + +V. Solution + +Perform one of the following: + +1) Upgrade your vulnerable system to a supported FreeBSD stable or +release / security branch (releng) dated after the correction date. + +The ntpd service has to be restarted after the update. A reboot is +recommended but not required. + +2) To update your vulnerable system via a binary patch: + +Systems running a RELEASE version of FreeBSD on the i386 or amd64 +platforms can be updated via the freebsd-update(8) utility: + +# freebsd-update fetch +# freebsd-update install + +The ntpd service has to be restarted after the update. A reboot is +recommended but not required. + +3) To update your vulnerable system via a source code patch: + +The following patches have been verified to apply to the applicable +FreeBSD release branches. + +a) Download the relevant patch from the location below, and verify the +detached PGP signature using your PGP utility. + +# fetch https://security.FreeBSD.org/patches/SA-16:24/ntp.patch +# fetch https://security.FreeBSD.org/patches/SA-16:24/ntp.patch.asc +# gpg --verify ntp.patch.asc + +b) Apply the patch. Execute the following commands as root: + +# cd /usr/src +# patch < /path/to/patch + +c) Recompile the operating system using buildworld and installworld as +described in <URL:https://www.FreeBSD.org/handbook/makeworld.html>. + +Restart the applicable daemons, or reboot the system. + +VI. Correction details + +The following list contains the correction revision numbers for each +affected branch. + +Branch/path Revision +- ------------------------------------------------------------------------- +stable/9/ r301257 +releng/9.3/ r301301 +stable/10/ r301256 +releng/10.1/ r301301 +releng/10.2/ r301301 +releng/10.3/ r301301 +- ------------------------------------------------------------------------- + +To see which files were modified by a particular revision, run the +following command, replacing NNNNNN with the revision number, on a +machine with Subversion installed: + +# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base + +Or visit the following URL, replacing NNNNNN with the revision number: + +<URL:https://svnweb.freebsd.org/base?view=revision&revision=NNNNNN> + +VII. References + +<URL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4957> + +<URL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4953> + +<URL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4954> + +<URL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4955> + +<URL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4956> + +The latest revision of this advisory is available at +<URL:https://security.FreeBSD.org/advisories/FreeBSD-SA-16:24.ntp.asc> +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2.1.12 (FreeBSD) + +iQIcBAEBCgAGBQJXUnRyAAoJEO1n7NZdz2rncMMQAIB69xMkhWqoZ+0R2R6MOPAI +UWIEPN4fLktiz4oIKP/C/xTsJdonC6+GCKbEb4h+deUOEYPaK5L1RsjvzwjqDKvI +9THtZUBoEcifALOiO1Mkum+1ntCkF+7EK2EXSuF2/wYga/ekVkCPZqLxmUEbL/KG +HEa4VCnMv0euAxEbtzix6efNTZV/9O0uUmYlU0wt8WF+YL+p15CyhBIc5YZISpWA +izugcLKU8xriFMOiyOIttnIS1pAKERu0Fh9EqlkfFhcmJXl18Oxn10L0qH6uEx/C +Rs11KzyJSuOpBl7x5NZi9jsTzlZlI6zqJ9b6Dlj2A8k82oz5p3VUf+CDyDlMZxHo +2PsRPGdYJA98w/dUFucZozt1J4K05dWOnd6oED1bY8bFEb+IhRYYOil/wqiNBJFw +Q9B6jB18Olp4PxxMZVX5kXz4j3tzqlt80wY9S/pVOIGjKcbxIHqhB5CFt1UJfsUw +BGzJTpYYBvqdS0e3ozO+4QyHBlm4Ure4JFlrb/kBXgLvnBcTfn5e2NMJKhMSvC0B +O5Ma1D7E2eYxxHgpUFTJYo+qNrfWsQHPClxOMVXbxUrz/iheEvTaed7tyHtMI5nz +vloTNWf4WNWnxYv5meOOSj2lXX5dxT+XpEA+1kmOWdWvOx8nmOWrOUYN6hM191jD +e3hZ2X6TAfHd5LIHtb2C +=ttlK +-----END PGP SIGNATURE----- Added: head/share/security/patches/SA-16:24/ntp.patch ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/patches/SA-16:24/ntp.patch Sat Jun 4 06:51:08 2016 (r48891) @@ -0,0 +1,11582 @@ +--- contrib/ntp/ChangeLog.orig ++++ contrib/ntp/ChangeLog +@@ -1,4 +1,26 @@ + --- ++(4.2.8p8) 2016/06/02 Released by Harlan Stenn <[email protected]> ++ ++* [Sec 3042] Broadcast Interleave. HStenn. ++* [Sec 3043] Autokey association reset. [email protected], [email protected] ++ - validate origin timestamps on bad MACs, too. [email protected] ++* [Sec 3044] Spoofed server packets are partially processed. HStenn. ++* [Sec 3045] Bad authentication demobilizes ephemeral associations. JPerlinger. ++* [Sec 3046] CRYPTO_NAK crash. [email protected] ++* [Bug 3038] NTP fails to build in VS2015. [email protected] ++ - provide build environment ++ - 'wint_t' and 'struct timespec' defined by VS2015 ++ - fixed print()/scanf() format issues ++* [Bug 3052] Add a .gitignore file. Edmund Wong. ++* [Bug 3054] miscopt.html documents the allan intercept in seconds. SWhite. ++* [Bug 3058] fetch_timestamp() mishandles 64-bit alignment. Brian Utterback, ++ JPerlinger, HStenn. ++* Update the NEWS file for 4.2.8p8. HStenn. ++* Fix typo in ntp-wait and plot_summary. HStenn. ++* Make sure we have an "author" file for git imports. HStenn. ++* Update the sntp problem tests for MacOS. HStenn. ++ ++--- + (4.2.8p7) 2016/04/26 Released by Harlan Stenn <[email protected]> + + * [Sec 2901] KoD packets must have non-zero transmit timestamps. HStenn. +--- contrib/ntp/CommitLog.orig ++++ contrib/ntp/CommitLog +@@ -1,3 +1,774 @@ [email protected], 2016-06-02 07:40:06-04:00, [email protected] ++ NTP_4_2_8P8 ++ TAG: NTP_4_2_8P8 ++ ++ [email protected] +1 -0 ++ NTP_4_2_8P8 ++ ++ ntpd/[email protected] +1 -1 ++ NTP_4_2_8P8 ++ ++ ntpd/[email protected] +1 -1 ++ NTP_4_2_8P8 ++ ++ ntpd/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ ntpd/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ ntpd/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ ntpd/[email protected] +55 -19 ++ NTP_4_2_8P8 ++ ++ ntpd/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ ntpd/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ ntpd/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ ntpd/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ ntpd/[email protected] +1 -1 ++ NTP_4_2_8P8 ++ ++ ntpd/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ ntpd/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ ntpd/[email protected] +7 -7 ++ NTP_4_2_8P8 ++ ++ ntpd/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ ntpd/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ ntpd/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ ntpd/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ ntpd/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ ntpd/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ ntpdc/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ ntpdc/[email protected] +7 -7 ++ NTP_4_2_8P8 ++ ++ ntpdc/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ ntpdc/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ ntpdc/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ ntpdc/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ ntpdc/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ ntpdc/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ ntpq/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ ntpq/[email protected] +7 -7 ++ NTP_4_2_8P8 ++ ++ ntpq/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ ntpq/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ ntpq/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ ntpq/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ ntpq/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ ntpq/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ ntpsnmpd/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ ntpsnmpd/[email protected] +7 -7 ++ NTP_4_2_8P8 ++ ++ ntpsnmpd/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ ntpsnmpd/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ ntpsnmpd/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ ntpsnmpd/[email protected] +1 -1 ++ NTP_4_2_8P8 ++ ++ ntpsnmpd/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ ntpsnmpd/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ [email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/calc_tickadj/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ scripts/calc_tickadj/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/calc_tickadj/[email protected] +1 -1 ++ NTP_4_2_8P8 ++ ++ scripts/calc_tickadj/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ scripts/calc_tickadj/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/calc_tickadj/[email protected] +1 -1 ++ NTP_4_2_8P8 ++ ++ scripts/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/ntp-wait/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/ntp-wait/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/ntp-wait/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ scripts/ntp-wait/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/ntp-wait/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/ntp-wait/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ scripts/ntp-wait/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/ntpsweep/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/ntpsweep/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/ntpsweep/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ scripts/ntpsweep/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/ntpsweep/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/ntpsweep/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ scripts/ntpsweep/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/ntptrace/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/ntptrace/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/ntptrace/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ scripts/ntptrace/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/ntptrace/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/ntptrace/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ scripts/ntptrace/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ scripts/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/[email protected] +40 -58 ++ NTP_4_2_8P8 ++ ++ scripts/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ scripts/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ scripts/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ scripts/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/update-leap/[email protected] +1 -1 ++ NTP_4_2_8P8 ++ ++ scripts/update-leap/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/update-leap/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ scripts/update-leap/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ scripts/update-leap/[email protected] +1 -1 ++ NTP_4_2_8P8 ++ ++ scripts/update-leap/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ scripts/update-leap/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ sntp/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ sntp/[email protected] +7 -7 ++ NTP_4_2_8P8 ++ ++ sntp/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ sntp/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ sntp/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ sntp/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ sntp/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ sntp/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ util/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ util/[email protected] +7 -7 ++ NTP_4_2_8P8 ++ ++ util/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ util/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ util/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ util/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ ++ util/[email protected] +3 -3 ++ NTP_4_2_8P8 ++ ++ util/[email protected] +2 -2 ++ NTP_4_2_8P8 ++ [email protected], 2016-06-02 06:50:37-04:00, [email protected] ++ 4.2.8p8 ++ ++ [email protected] +1 -1 ++ 4.2.8p8 ++ [email protected], 2016-05-27 08:02:09+00:00, [email protected] ++ typo ++ ++ [email protected] +1 -1 ++ typo ++ [email protected], 2016-05-27 00:07:22-07:00, [email protected] ++ [Bug 3058] fetch_timestamp() mishandles 64-bit alignment. Brian Utterback, JPerlinger, HStenn. ++ ++ [email protected] +2 -0 ++ [Bug 3058] fetch_timestamp() mishandles 64-bit alignment. Brian Utterback, JPerlinger, HStenn. ++ ++ [email protected] +2 -0 ++ [Bug 3058] fetch_timestamp() mishandles 64-bit alignment. Brian Utterback, JPerlinger, HStenn. ++ ++ ntpd/[email protected] +41 -41 ++ [Bug 3058] fetch_timestamp() mishandles 64-bit alignment. Brian Utterback, JPerlinger, HStenn. ++ [email protected], 2016-05-26 22:37:19-07:00, [email protected] ++ [Sec3043] - validate origin timestamps on bad MACs, too. [email protected] ++ ++ [email protected] +2 -1 ++ [Sec3043] - validate origin timestamps on bad MACs, too. [email protected] ++ ++ [email protected] +9 -9 ++ [Sec3043] - validate origin timestamps on bad MACs, too. [email protected] ++ ++ ntpd/[email protected] +19 -6 ++ [Sec3043] - validate origin timestamps on bad MACs, too. [email protected] ++ [email protected], 2016-05-24 23:31:36+00:00, [email protected] ++ Update the NEWS file for 4.2.8p8. HStenn. ++ ++ [email protected] +1 -0 ++ Update the NEWS file for 4.2.8p8. HStenn. ++ ++ [email protected] +103 -2 ++ Update the NEWS file for 4.2.8p8. HStenn. ++ [email protected], 2016-05-24 12:05:06+00:00, [email protected] ++ [Sec 3044] Spoofed server packets are partially processed. HStenn. ++ ++ [email protected] +3 -2 ++ [Sec 3044] Spoofed server packets are partially processed. HStenn. ++ ++ ntpd/[email protected] +39 -24 ++ [Sec 3044] Spoofed server packets are partially processed. HStenn. ++ [email protected], 2016-05-24 02:58:00-07:00, [email protected] ++ Make sure we have an "author" file for git imports. HStenn. ++ ++ [email protected] +1 -0 ++ Update the problem tests for MacOS for sntp. HStenn. ++ ++ [email protected] +1 -0 ++ Make sure we have an "author" file for git imports. HStenn. ++ ++ [email protected] +1 -0 ++ Make sure we have an "author" file for git imports. HStenn. ++ ++ scripts/build/[email protected] +1 -1 ++ Make sure we have an "author" file for git imports. HStenn. ++ ++ scripts/build/[email protected] +82 -0 ++ BitKeeper file /Users/harlan/src/ntp-stable/scripts/build/genAuthors.in ++ ++ scripts/build/[email protected] +0 -0 ++ ++ sntp/[email protected] +2 -0 ++ Make sure we have an "author" file for git imports. HStenn. ++ ++ sntp/m4/[email protected] +1 -0 ++ Make sure we have an "author" file for git imports. HStenn. ++ ++ sntp/m4/[email protected] +47 -0 ++ BitKeeper file /Users/harlan/src/ntp-stable/sntp/m4/sntp_problemtests.m4 ++ ++ sntp/m4/[email protected] +0 -0 ++ ++ sntp/tests/[email protected] +8 -2 ++ Update the problem tests for MacOS for sntp. HStenn. ++ [email protected], 2016-05-24 02:25:46-07:00, [email protected] ++ [Sec 3042] Broadcast Interleave. HStenn. ++ ++ [email protected] +4 -0 ++ [Sec 3042] Broadcast Interleave. HStenn. ++ ++ ntpd/[email protected] +69 -14 ++ [Sec 3042] Broadcast Interleave. HStenn. ++ [email protected], 2016-05-23 09:53:37+00:00, [email protected] ++ [Sec 3043] Autokey association reset. [email protected], [email protected] ++ ++ [email protected] +1 -1 ++ [Sec 3043] Autokey association reset. [email protected], [email protected] ++ ++ include/[email protected] +1 -0 ++ [Sec 3043] Autokey association reset. [email protected], [email protected] ++ ++ ntpd/[email protected] +1 -1 ++ [Sec 3043] Autokey association reset. [email protected], [email protected] ++ ++ ntpd/[email protected] +23 -3 ++ [Sec 3043] Autokey association reset. [email protected], [email protected] ++ ++ ntpd/[email protected] +1 -1 ++ [Sec 3043] Autokey association reset. [email protected], [email protected] ++ ++ ntpd/[email protected] +2 -1 ++ [Sec 3043] Autokey association reset. [email protected], [email protected] ++ ++ ntpd/[email protected] +27 -6 ++ [Sec 3043] Autokey association reset. [email protected], [email protected] ++ ++ ntpd/[email protected] +24 -2 ++ [Sec 3043] Autokey association reset. [email protected], [email protected] ++ ++ ntpd/[email protected] +22 -0 ++ [Sec 3043] Autokey association reset. [email protected], [email protected] ++ ++ ntpd/[email protected] +27 -6 ++ [Sec 3043] Autokey association reset. [email protected], [email protected] ++ ++ ntpd/[email protected] +24 -2 ++ [Sec 3043] Autokey association reset. [email protected], [email protected] ++ ++ ntpd/[email protected] +6 -2 ++ [Sec 3043] Autokey association reset. [email protected], [email protected] ++ ++ ntpd/[email protected] +617 -597 ++ [Sec 3043] Autokey association reset. [email protected], [email protected] ++ ++ ntpd/[email protected] +1541 -1773 ++ [Sec 3043] Autokey association reset. [email protected], [email protected] ++ ++ ntpd/[email protected] +294 -306 ++ [Sec 3043] Autokey association reset. [email protected], [email protected] ++ ++ ntpd/[email protected] +2 -0 ++ [Sec 3043] Autokey association reset. [email protected], [email protected] ++ ++ ntpd/[email protected] +29 -8 ++ [Sec 3043] Autokey association reset. [email protected], [email protected] ++ [email protected], 2016-05-17 06:49:41+00:00, [email protected] ++ [Bug 3054] miscopt.html documents the allan intercept in seconds. SWhite. ++ ++ [email protected] +1 -0 ++ [Bug 3054] miscopt.html documents the allan intercept in seconds. SWhite. ++ ++ html/[email protected] +2 -2 ++ [Bug 3054] miscopt.html documents the allan intercept in seconds. SWhite. ++ [email protected], 2016-05-17 04:25:50+00:00, [email protected] ++ [Bug 3052] Add a .gitignore file. Edmund Wong. ++ ++ [email protected] +9 -0 ++ BitKeeper file /home/stenn/ntp-stable/.gitignore ++ ++ [email protected] +0 -0 ++ ++ BitKeeper/etc/[email protected] +0 -1 ++ [Bug 3052] Add a .gitignore file. Edmund Wong. ++ ++ [email protected] +1 -0 ++ [Bug 3052] Add a .gitignore file. Edmund Wong. ++ [email protected], 2016-05-08 11:59:28+02:00, [email protected] ++ [Sec 3043] Autokey association reset. [email protected] ++ (fixes [Sec 3044] and [Sec 3045], too) ++ ++ [email protected] +2 -0 ++ [Sec 3043] Autokey association reset. [email protected] ++ ++ ntpd/[email protected] +28 -22 ++ [Sec 3043] Autokey association reset. [email protected] ++ (fixes [Sec 3044] and [Sec 3045], too) ++ [email protected], 2016-05-06 11:05:44+00:00, [email protected] ++ [Sec 3046] CRYPTO_NAK crash ++ ++ [email protected] +1 -0 ++ [Sec 3046] CRYPTO_NAK crash ++ ++ ntpd/[email protected] +2 -1 ++ [Sec 3046] CRYPTO_NAK crash ++ [email protected], 2016-05-06 09:20:29+00:00, [email protected] ++ Fix typo in ntp-wait and plot_summary. HStenn. ++ ++ [email protected] +4 -0 ++ Fix typo in ntp-wait and plot_summary. HStenn. ++ ++ scripts/[email protected] +2 -2 ++ Fix typo in ntp-wait and plot_summary. HStenn. ++ ++ scripts/ntp-wait/[email protected] +1 -1 ++ Fix typo in ntp-wait and plot_summary. HStenn. ++ ++ scripts/[email protected] +1 -1 ++ Fix typo in ntp-wait and plot_summary. HStenn. ++ ++ scripts/[email protected] +1 -1 ++ Fix typo in ntp-wait and plot_summary. HStenn. ++ ++ scripts/[email protected] +4 -4 ++ Fix typo in ntp-wait and plot_summary. HStenn. ++ ++ scripts/[email protected] +3 -3 ++ Fix typo in ntp-wait and plot_summary. HStenn. ++ ++ scripts/[email protected] +58 -40 ++ Fix typo in ntp-wait and plot_summary. HStenn. ++ ++ scripts/[email protected] +4 -4 ++ Fix typo in ntp-wait and plot_summary. HStenn. ++ ++ scripts/[email protected] +3 -3 ++ Fix typo in ntp-wait and plot_summary. HStenn. ++ ++ scripts/t/[email protected] +1 -1 ++ Fix typo in ntp-wait and plot_summary. HStenn. ++ [email protected], 2016-05-05 06:17:20+00:00, [email protected] ++ Update NEWS file for 4.2.8p9 for Bug 3038 ++ ++ [email protected] +9 -0 ++ Update NEWS file for 4.2.8p9 for Bug 3038 ++ [email protected], 2016-05-05 06:09:53+00:00, [email protected] ++ trivial cleanup ++ ++ [email protected] +1 -0 ++ trivial cleanup ++ [email protected], 2016-04-27 21:54:12+02:00, [email protected] ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - new build environment ++ - 'wint_t' and 'struct timespec' defined by VS2015 ++ - fixed several format clashes in 'printf()' and 'scanf' ++ ++ BitKeeper/etc/[email protected] +1 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - skip next version of MSVC symbol database ++ ++ [email protected] +6 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ ++ ntpd/[email protected] +6 -6 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - work around clash SOCKET vs file descriptor formatting ++ ++ ntpdc/[email protected] +2 -2 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - fix format warnings/errors ++ ++ ntpq/[email protected] +5 -2 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - fix format warnings/errors ++ ++ ports/winnt/include/[email protected] +4 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - VS2015 has 'wint_t' ++ ++ ports/winnt/include/sys/[email protected] +2 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - VS2015 has 'struct timespec' ++ ++ ports/winnt/libntp/[email protected] +3 -3 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - fix format parsing error ++ ++ ports/winnt/ppsapi/loopback/src/sys/[email protected] +2 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - VS2015 has 'struct timespec' ++ ++ ports/winnt/vs2013/[email protected] +1 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ -enable multiprocessor build ++ ++ ports/winnt/vs2015/[email protected] +60 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - add build environment ++ ++ ports/winnt/vs2015/[email protected] +0 -0 ++ ++ ports/winnt/vs2015/[email protected] +24 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - add build environment ++ ++ ports/winnt/vs2015/[email protected] +0 -0 ++ ++ ports/winnt/vs2015/[email protected] +24 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - add build environment ++ ++ ports/winnt/vs2015/[email protected] +0 -0 ++ ++ ports/winnt/vs2015/instsrv/[email protected] +269 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - add build environment ++ ++ ports/winnt/vs2015/instsrv/[email protected] +0 -0 ++ ++ ports/winnt/vs2015/instsrv/[email protected] +28 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - add build environment ++ ++ ports/winnt/vs2015/instsrv/[email protected] +0 -0 ++ ++ ports/winnt/vs2015/libntp/[email protected] +431 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - add build environment ++ ++ ports/winnt/vs2015/libntp/[email protected] +0 -0 ++ ++ ports/winnt/vs2015/libntp/[email protected] +574 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - add build environment ++ ++ ports/winnt/vs2015/libntp/[email protected] +0 -0 ++ ++ ports/winnt/vs2015/loopback-pps/[email protected] +252 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - add build environment ++ ++ ports/winnt/vs2015/loopback-pps/[email protected] +0 -0 ++ ++ ports/winnt/vs2015/loopback-pps/[email protected] +39 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - add build environment ++ ++ ports/winnt/vs2015/loopback-pps/[email protected] +0 -0 ++ ++ ports/winnt/vs2015/ntp-keygen/[email protected] +270 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - add build environment ++ ++ ports/winnt/vs2015/ntp-keygen/[email protected] +0 -0 ++ ++ ports/winnt/vs2015/ntp-keygen/[email protected] +36 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - add build environment ++ ++ ports/winnt/vs2015/ntp-keygen/[email protected] +0 -0 ++ ++ ports/winnt/vs2015/[email protected] +166 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - add build environment ++ ++ ports/winnt/vs2015/[email protected] +0 -0 ++ ++ ports/winnt/vs2015/ntpd-keyword-gen/[email protected] +227 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - add build environment ++ ++ ports/winnt/vs2015/ntpd-keyword-gen/[email protected] +0 -0 ++ ++ ports/winnt/vs2015/ntpd-keyword-gen/[email protected] +69 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - add build environment ++ ++ ports/winnt/vs2015/ntpd-keyword-gen/[email protected] +0 -0 ++ ++ ports/winnt/vs2015/ntpd/[email protected] +53 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - add build environment ++ ++ ports/winnt/vs2015/ntpd/[email protected] +0 -0 ++ ++ ports/winnt/vs2015/ntpd/[email protected] +515 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - add build environment ++ ++ ports/winnt/vs2015/ntpd/[email protected] +0 -0 ++ ++ ports/winnt/vs2015/ntpd/[email protected] +556 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - add build environment ++ ++ ports/winnt/vs2015/ntpd/[email protected] +0 -0 ++ ++ ports/winnt/vs2015/ntpdate/[email protected] +287 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - add build environment ++ ++ ports/winnt/vs2015/ntpdate/[email protected] +0 -0 ++ ++ ports/winnt/vs2015/ntpdate/[email protected] +72 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - add build environment ++ ++ ports/winnt/vs2015/ntpdate/[email protected] +0 -0 ++ ++ ports/winnt/vs2015/ntpdc/[email protected] +278 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - add build environment ++ ++ ports/winnt/vs2015/ntpdc/[email protected] +0 -0 ++ ++ ports/winnt/vs2015/ntpdc/[email protected] +45 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - add build environment ++ ++ ports/winnt/vs2015/ntpdc/[email protected] +0 -0 ++ ++ ports/winnt/vs2015/ntpq/[email protected] +277 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - add build environment ++ ++ ports/winnt/vs2015/ntpq/[email protected] +0 -0 ++ ++ ports/winnt/vs2015/ntpq/[email protected] +42 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - add build environment ++ ++ ports/winnt/vs2015/ntpq/[email protected] +0 -0 ++ ++ ports/winnt/vs2015/[email protected] +25 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - add build environment ++ ++ ports/winnt/vs2015/[email protected] +0 -0 ++ ++ ports/winnt/vs2015/[email protected] +25 -0 ++ [Bug 3038] NTP fails to build in VS2015 Community Edition ++ - add build environment ++ ++ ports/winnt/vs2015/[email protected] +0 -0 ++ + [email protected], 2016-04-26 20:30:51-04:00, [email protected] + NTP_4_2_8P7 + TAG: NTP_4_2_8P7 +--- contrib/ntp/NEWS.orig ++++ contrib/ntp/NEWS +@@ -1,4 +1,116 @@ + --- ++NTP 4.2.8p8 (Harlan Stenn <[email protected]>, 2016/06/02) ++ ++Focus: Security, Bug fixes, enhancements. ++ ++Severity: HIGH ++ ++In addition to bug fixes and enhancements, this release fixes the ++following 1 high- and 4 low-severity vulnerabilities: ++ ++* CRYPTO_NAK crash ++ Date Resolved: 02 June 2016; Dev (4.3.93) 02 June 2016 ++ References: Sec 3046 / CVE-2016-4957 / VU#321640 *** DIFF OUTPUT TRUNCATED AT 1000 LINES *** _______________________________________________ [email protected] mailing list https://lists.freebsd.org/mailman/listinfo/svn-doc-all To unsubscribe, send any mail to "[email protected]"