kumquat-buildroot/package/ntp/ntp.hash

# From https://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2/ntp-4.2.8p12.tar.gz.md5
md5 1522d66574bae14abb2622746dad2bdc  ntp-4.2.8p12.tar.gz
# Calculated based on the hash above
sha256 709b222b5013d77d26bfff532b5ea470a8039497ef29d09363931c036cb30454  ntp-4.2.8p12.tar.gz
sha256 62c87b269365b38b55359b16dfde7ec28c683c722ef489db90afd0f2e478e4a1  COPYRIGHT
package/ntp: fix md5sum. Signed-off-by: Artem Panfilov <apanfilov@spectracom.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2018-10-10 23:01:45 +02:00			`# From https://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2/ntp-4.2.8p12.tar.gz.md5`
			`md5 1522d66574bae14abb2622746dad2bdc ntp-4.2.8p12.tar.gz`
ntp: security bump to version 4.2.8p3 Fixes: CVE-2015-5146 - ntpd control message crash: Crafted NUL-byte in configuration directive. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2015-07-01 12:47:15 +02:00			`# Calculated based on the hash above`
package/ntp: security bump to version 4.2.8p12 Release notes: https://www.nwtime.org/network-time-foundation-publishes-ntp-4-2-8p12 Fixed security issues: CVE-2016-1549 / CVE-2018-7170: Sybil vulnerability: ephemeral association attack CVE-2018-12327: The openhost() function used during command-line hostname processing by ntpq and ntpdc can write beyond its buffer limit Signed-off-by: Artem Panfilov <apanfilov@spectracom.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2018-10-10 11:03:05 +02:00			`sha256 709b222b5013d77d26bfff532b5ea470a8039497ef29d09363931c036cb30454 ntp-4.2.8p12.tar.gz`
ntp: security bump to version 4.2.8p11 Fixed or improved security issues: CVE-2016-1549 (fixed in 4.2.8p7; this release adds protection): A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm CVE-2018-7182: Buffer read overrun leads to undefined behavior and information leak CVE-2018-7170: Multiple authenticated ephemeral associations CVE-2018-7184: Interleaved symmetric mode cannot recover from bad state CVE-2018-7185: Unauthenticated packet can reset authenticated interleaved association CVE-2018-7183: ntpq:decodearr() can write beyond its buffer limit Drop patch #3. libntpq_a_CFLAGS now includes NTP_HARD_CFLAGS via AM_CFLAGS. Add license file hash. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2018-03-06 18:00:47 +01:00			`sha256 62c87b269365b38b55359b16dfde7ec28c683c722ef489db90afd0f2e478e4a1 COPYRIGHT`