kumquat-buildroot/package/ntp/ntp.hash
Baruch Siach 67b845fcc9 ntp: security bump to version 4.2.8p1
Fixes:

CVE-2014-9297 - vallen is not validated in several places in ntp_crypto.c,
leading to a potential information leak or possibly a crash

CVE-2014-9298 - ::1 can be spoofed on some OSes (including "some versions" of
Linux), so ACLs based on IPv6 ::1 addresses can be bypassed

Drop a patch applied upstream, along with its accompanied AUTORECONF.

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-02-11 00:35:18 +01:00

3 lines
140 B
Plaintext

# From http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2/ntp-4.2.8p1.tar.gz.md5
md5 65d8cdfae4722226fbe29863477641ed ntp-4.2.8p1.tar.gz