Overview Repositories Revisions Requests Users Attributes Meta

Revisions of ntpsec

buildservice-autocommit accepted request 1149607 from Martin Pluskal's avatar Martin Pluskal (pluskalm) (revision 98) 
baserev update by copy to link target
buildservice-autocommit accepted request 1128911 from Martin Pluskal's avatar Martin Pluskal (pluskalm) (revision 96) 
baserev update by copy to link target
Martin Pluskal's avatar Martin Pluskal (pluskalm) accepted request 1128824 from Dirk Mueller's avatar Dirk Mueller (dirkmueller) (revision 95) 
- update to 1.2.2a (bsc#1214024, CVE-2023-4012):
  * Fix a crash in ntpd if NTS is disabled and an NTS-enabled
    client request (mode 3) is received. (CVE-2023-4012)

- Update to 1.1.3 bsc#1122131 CVE-2019-6445 bsc#1122132
buildservice-autocommit accepted request 1063583 from Martin Pluskal's avatar Martin Pluskal (pluskalm) (revision 94) 
baserev update by copy to link target
Martin Pluskal's avatar Martin Pluskal (pluskalm) accepted request 1063408 from Marcus Meissner's avatar Marcus Meissner (msmeissn) (revision 93) 
- Updated to version 1.2.2
  - Restore/cleanup NTPv1 support
    - ntpq sysstats now shows NTPv1 traffic.
    - NTPv1 counter added to sysstats log file.
    - NTS supports partial wildcards, for example *.example.com
    - Work on documentation, ntpdate, ntpheat, ntploggpg, ntpq's sysstats, ntpviz, and seccomp.
    - NTP auth no longer breaks on NULs.
    - The NTS server now saves 10 days worth of cookie keys. This will allow clients that only poll once a day to use NTS without using NTS-KE to keep cookies up to date.
    - rawstats now logs dropped packets and their BOGON code
      - Only one per request to avoid DoSing the log file
      - This lets you see packets that take too long.
    - Add 4 or 6 to DNS/NTS RefID tags to indicate that the DNS or NTS-KE has succeeded but NTP has not worked yet.
    - Build improvements
      - Restore Python 2.6 support
      - Restore LibreSSL support
      - Add support for OpenSSL 3.0
    - Fix hash validation in ntpleapfetch again.
    - FreeBSD now gets nanosecond resolution on receive time stamps.
- added ntpsec.keyring
Martin Pluskal's avatar Martin Pluskal (pluskalm) accepted request 924896 from Johannes Segitz's avatar Johannes Segitz (jsegitz) (revision 92) 
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
buildservice-autocommit accepted request 899887 from Martin Pluskal's avatar Martin Pluskal (pluskalm) (revision 91) 
baserev update by copy to link target
Martin Pluskal's avatar Martin Pluskal (pluskalm) accepted request 898852 from Martin Hauke's avatar Martin Hauke (mnhauke) (revision 90) 
- Update to version 1.2.1
  * Update ntpkeygen/keygone to properly filter # characters.
    Fix security issue: CVE-2021-22212
  * Add dextral peers mode in ntpq and ntpmon.
  * Drop NTPv1 as the support was not RFC compliant, maybe v2
    except mode 6 next.
  * Fix argument P for ntpd parsing fixed and ntpdate improvements.
  * Fix crash for raw ntpq readvar.
  * Add processor usage to NTS-KE logging except on NetBSD.
  * Remove --build-epoch and replace it with arbitrary
    --build-desc text. Passing
    '--build-desc=$(date -u +%Y-%m-%dT%H:%M:%Sz)' restores the
    previous default extended version.
  * The build epoch has been replaced with a hardcoded timestamp
    which will be manually updated every nine years or so
    (approx 512w). This makes the binaries reproducible by default.
  * Compare versions of ntp.ntpc and libntpc printing a warning
    if mismatched. Fix libntpc install path if using it.
  * Reduce maxclocks default to 5 to reduce the NTP pool load.
  * Print LIBDIR during ./waf configure.
  * Add documentation, new GPG key, and other cleanups.
- Update to version 1.2.0
  * The minor version bump is to indicate official official support
    of RFC8915 "Network Time Security for the Network Time
    Protocol" which was released 2020-09-30.
  * NTS-KE client now defaults to port 4460.
  * NTS-KE server now listens on port 4460. (Listening on port 123
    has been removed.)
  * The shebang of installed Python scripts can now be customized
    with: waf configure --pyshebang="…" This has multiple uses, but
buildservice-autocommit accepted request 862084 from Martin Pluskal's avatar Martin Pluskal (pluskalm) (revision 89) 
baserev update by copy to link target
Martin Pluskal's avatar Martin Pluskal (pluskalm) accepted request 861773 from Martin Hauke's avatar Martin Hauke (mnhauke) (revision 88) 
- Let system-user-ntp handle the user/group generation
buildservice-autocommit accepted request 810123 from Martin Pluskal's avatar Martin Pluskal (pluskalm) (revision 87) 
baserev update by copy to link target
buildservice-autocommit accepted request 782532 from Tomáš Chvátal's avatar Tomáš Chvátal (scarabeus_iv) (revision 85) 
baserev update by copy to link target
Tomáš Chvátal's avatar Tomáš Chvátal (scarabeus_iv) committed (revision 83) 
- Update to 1.1.8:
  * Fix bug in NTS-KE client so that NTP server names work.
  * Fix/tweak several NTS logging messages.
buildservice-autocommit accepted request 738253 from Tomáš Chvátal's avatar Tomáš Chvátal (scarabeus_iv) (revision 82) 
baserev update by copy to link target
Tomáš Chvátal's avatar Tomáš Chvátal (scarabeus_iv) committed (revision 81) 
- Update the unit install commands wrt bsc#1153841
buildservice-autocommit accepted request 738217 from Tomáš Chvátal's avatar Tomáš Chvátal (scarabeus_iv) (revision 80) 
baserev update by copy to link target
Displaying revisions 1 - 20 of 98
openSUSE Build Service is sponsored by
Places