openSUSE Build Service

buildservice-autocommit accepted request 1189230 from

Martin Pluskal (pluskalm) 4 months ago (revision 100)

baserev update by copy to link target

Martin Pluskal (pluskalm) accepted request 1189105 from

Martin Hauke (mnhauke) 4 months ago (revision 99)

- Updat to version 1.2.3
  * Change mode6 alignment to four, which may break some
    compatibility with classic NTP.
  * Seccomp should now also yield invalid syscall names when dying.
  * Make ntpq stop dropping output timestamp leading zeroes.
  * Update documents in quite a few places.
  * Reset some stats hourly, even when not logged into files.
  * Add error logging, and stats for ms-sntp.
  * Add spacing between multiple peer views in ntpq.
  * We think we have fixed ms-sntp but we can’t test it.
  * ntpd and ntpq both treat SHA-1 as an alias for SHA1 NIST
    uses SHA-1. The crypto package from OpenSSL uses SHA1.
  * The default crypto type for ntpq is now AES. RFC 8573
    deprecated MD5.
  * There are now log files with hourly statistics for NTS and
    NTS-KE traffic: filegen ntsstats and filegen ntskestats,
  * Update ntpsnmpd to use python built-in to get uname information.
  * Update license file names for REUSE compliance.
  * Fix ntploggps issue where count_used_satellites checked before
    it is initialized.
  * Print out OpenSSL version at configure time.
  * Enable debug symbols by default, with only an option to disable.
  * Add support for ecdhcurves list.
  * Fix ntpdig crash when using 2.ntp.pool.org with a host without
    IPv6 support.
  * Do not install libaes_siv test anymore.
  * Add update option to buildprep.
  * ntpdig shows packet delay in JSON output.

buildservice-autocommit accepted request 1149607 from

Martin Pluskal (pluskalm) 9 months ago (revision 98)

baserev update by copy to link target

Martin Pluskal (pluskalm) accepted request 1149487 from

Dominique Leuenberger (dimstar) 9 months ago (revision 97)

Prepare for RPM 4.20

buildservice-autocommit accepted request 1128911 from

Martin Pluskal (pluskalm) about 1 year ago (revision 96)

baserev update by copy to link target

Martin Pluskal (pluskalm) accepted request 1128824 from

Dirk Mueller (dirkmueller) about 1 year ago (revision 95)

- update to 1.2.2a (bsc#1214024, CVE-2023-4012):
  * Fix a crash in ntpd if NTS is disabled and an NTS-enabled
    client request (mode 3) is received. (CVE-2023-4012)

- Update to 1.1.3 bsc#1122131 CVE-2019-6445 bsc#1122132

buildservice-autocommit accepted request 1063583 from

Martin Pluskal (pluskalm) almost 2 years ago (revision 94)

baserev update by copy to link target

Martin Pluskal (pluskalm) accepted request 1063408 from

Marcus Meissner (msmeissn) almost 2 years ago (revision 93)

- Updated to version 1.2.2
  - Restore/cleanup NTPv1 support
    - ntpq sysstats now shows NTPv1 traffic.
    - NTPv1 counter added to sysstats log file.
    - NTS supports partial wildcards, for example *.example.com
    - Work on documentation, ntpdate, ntpheat, ntploggpg, ntpq's sysstats, ntpviz, and seccomp.
    - NTP auth no longer breaks on NULs.
    - The NTS server now saves 10 days worth of cookie keys. This will allow clients that only poll once a day to use NTS without using NTS-KE to keep cookies up to date.
    - rawstats now logs dropped packets and their BOGON code
      - Only one per request to avoid DoSing the log file
      - This lets you see packets that take too long.
    - Add 4 or 6 to DNS/NTS RefID tags to indicate that the DNS or NTS-KE has succeeded but NTP has not worked yet.
    - Build improvements
      - Restore Python 2.6 support
      - Restore LibreSSL support
      - Add support for OpenSSL 3.0
    - Fix hash validation in ntpleapfetch again.
    - FreeBSD now gets nanosecond resolution on receive time stamps.
- added ntpsec.keyring

Martin Pluskal (pluskalm) accepted request 924896 from

Johannes Segitz (jsegitz) about 3 years ago (revision 92)

Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort

buildservice-autocommit accepted request 899887 from

Martin Pluskal (pluskalm) over 3 years ago (revision 91)

baserev update by copy to link target

Martin Pluskal (pluskalm) accepted request 898852 from

Martin Hauke (mnhauke) over 3 years ago (revision 90)

- Update to version 1.2.1
  * Update ntpkeygen/keygone to properly filter # characters.
    Fix security issue: CVE-2021-22212
  * Add dextral peers mode in ntpq and ntpmon.
  * Drop NTPv1 as the support was not RFC compliant, maybe v2
    except mode 6 next.
  * Fix argument P for ntpd parsing fixed and ntpdate improvements.
  * Fix crash for raw ntpq readvar.
  * Add processor usage to NTS-KE logging except on NetBSD.
  * Remove --build-epoch and replace it with arbitrary
    --build-desc text. Passing
    '--build-desc=$(date -u +%Y-%m-%dT%H:%M:%Sz)' restores the
    previous default extended version.
  * The build epoch has been replaced with a hardcoded timestamp
    which will be manually updated every nine years or so
    (approx 512w). This makes the binaries reproducible by default.
  * Compare versions of ntp.ntpc and libntpc printing a warning
    if mismatched. Fix libntpc install path if using it.
  * Reduce maxclocks default to 5 to reduce the NTP pool load.
  * Print LIBDIR during ./waf configure.
  * Add documentation, new GPG key, and other cleanups.
- Update to version 1.2.0
  * The minor version bump is to indicate official official support
    of RFC8915 "Network Time Security for the Network Time
    Protocol" which was released 2020-09-30.
  * NTS-KE client now defaults to port 4460.
  * NTS-KE server now listens on port 4460. (Listening on port 123
    has been removed.)
  * The shebang of installed Python scripts can now be customized
    with: waf configure --pyshebang="…" This has multiple uses, but

buildservice-autocommit accepted request 862084 from

Martin Pluskal (pluskalm) almost 4 years ago (revision 89)

baserev update by copy to link target

Martin Pluskal (pluskalm) accepted request 861773 from

Martin Hauke (mnhauke) almost 4 years ago (revision 88)

- Let system-user-ntp handle the user/group generation

buildservice-autocommit accepted request 810123 from

Martin Pluskal (pluskalm) over 4 years ago (revision 87)

baserev update by copy to link target

Martin Pluskal (pluskalm) accepted request 810122 from

Christophe Giboudeaux (cgiboudeaux) over 4 years ago (revision 86)

Update to 1.1.9

buildservice-autocommit accepted request 782532 from

Tomáš Chvátal (scarabeus_iv) over 4 years ago (revision 85)

baserev update by copy to link target

Tomáš Chvátal (scarabeus_iv) committed over 4 years ago (revision 84)

Tomáš Chvátal (scarabeus_iv) committed almost 5 years ago (revision 83)

- Update to 1.1.8:
  * Fix bug in NTS-KE client so that NTP server names work.
  * Fix/tweak several NTS logging messages.

buildservice-autocommit accepted request 738253 from

Tomáš Chvátal (scarabeus_iv) about 5 years ago (revision 82)

baserev update by copy to link target

Tomáš Chvátal (scarabeus_iv) committed about 5 years ago (revision 81)

- Update the unit install commands wrt bsc#1153841

Places

Revisions of ntpsec

Places