Changes in authentic.html

897be3a4bac39d8b2e92077bf29f4a2e67d31983 - Import ntp-4.2.8p18 (previous was ntp-4.2.8p15

Sun, 18 Aug 2024 20:37:27 +0000

Import ntp-4.2.8p18 (previous was ntp-4.2.8p15---(4.2.8p18) 2024/05/25 Released by Harlan Stenn * [Bug 3918] Tweak openssl header/library handling. * [Bug 3914] Spurious "Unexpected origin timestamp" logged after time stepped. * [Bug 3913] Avoid duplicate IPv6 link-local manycast associations. * [Bug 3912] Avoid rare math errors in ntptrace. * [Bug 3910] Memory leak using openssl-3 * [Bug 3909] Do not select multicast local address for unicast peer. * [Bug 3903] lib/isc/win32/strerror.c NTstrerror() is not thread-safe. * [Bug 3901] LIB_GETBUF isn't thread-safe. * [Bug 3900] fast_xmit() selects wrong local addr responding to mcast on Windows. * [Bug 3888] ntpd with multiple same-subnet IPs using manycastclient creates duplicate associations. * [Bug 3872] Ignore restrict mask for hostname. * [Bug 3871] 4.2.8p17 build without hopf6021 refclock enabled fails. Reported by Hans Mayer. Moved NONEMPTY_TRANSLATION_UNIT declaration from ntp_types.h to config.h. * [Bug 3870] Server drops client packets with ppoll < 4. * [Bug 3869] Remove long-gone "calldelay" & "crypto sign" from docs. Reported by PoolMUC@web.de. * [Bug 3868] Cannot restrict a pool peer. Thanks to Edward McGuire for tracking down the deficiency.* [Bug 3864] ntpd IPv6 refid different for big-endian and little-endian. * [Bug 3859] Use NotifyIpInterfaceChange on Windows ntpd. * [Bug 3856] Enable Edit & Continue debugging with Visual Studio. * [Bug 3855] ntpq lacks an equivalent to ntpdc's delrestrict. * [Bug 3854] ntpd 4.2.8p17 corrupts rawstats file with space in refid. * [Bug 3853] Clean up warnings with modern compilers. * [Bug 3852] check-libntp.mf and friends are not triggering rebuilds as intended. * [Bug 3851] Drop pool server when no local address can reach it. * [Bug 3850] ntpq -c apeers breaks column formatting s2 w/refclock refid. * [Bug 3849] ntpd --wait-sync times out. * [Bug 3847] SSL detection in configure should run-test if runpath is needed. * [Bug 3846] Use -Wno-format-truncation by default. * [Bug 3845] accelerate pool clock_sync when IPv6 has only link-local access. * [Bug 3842] Windows ntpd PPSAPI DLL load failure crashes. * [Bug 3841] 4.2.8p17 build break w/ gcc 12 -Wformat-security without -Wformat Need to remove --Wformat-security when removing -Wformat to silence numerous libopts warnings. * [Bug 3837] NULL pointer deref crash when ntpd deletes last interface. Reported by renmingshuai. Correct UNLINK_EXPR_SLIST() when the list is empty. * [Bug 3835] NTP_HARD_*FLAGS not used by libevent tearoff. * [Bug 3831] pollskewlist zeroed on runtime configuration. * [Bug 3830] configure libevent check intersperses output with answer. * [Bug 3828] BK should ignore a git repo in the same directory. * [Bug 3827] Fix build in case CLOCK_HOPF6021 or CLOCK_WHARTON_400A is disabled. * [Bug 3825] Don't touch HTML files unless building inside a BK repo. Fix the script checkHtmlFileDates. * [Bug 3756] Improve OpenSSL library/header detection.* [Bug 3753] ntpd fails to start with FIPS-enabled OpenSSL 3. * [Bug 2734] TEST3 prevents initial interleave sync. Fix from * Log failures to allocate receive buffers. * Remove extraneous */ from libparse/ieee754io.c* Fix .datecheck target line in Makefile.am. * Update the copyright year. * Update ntp.conf documentation to add "delrestrict" and correct information about KoD rate limiting. * html/clockopt.html cleanup. * util/lsf-times - added. * Add DSA, DSA-SHA, and SHA to tests/libntp/digests.c. * Provide ntpd thread names to debugger on Windows. * Remove dead code libntp/numtohost.c and its unit tests. * Remove class A, B, C IPv4 distinctions in netof(). * Use @configure_input@ in various *.in files to include a comment that the file is generated from another pointing to the *.in. * Correct underquoting, indents in ntp_facilitynames.m4. * Clean up a few warnings seen building with older gcc. * Fix build on older FreeBSD lacking sys/procctl.h. * Disable [Bug 3627] workaround on newer FreeBSD which has the kernel fix that makes it unnecessary, re-enabling ASLR stack gap. * Use NONEMPTY_COMPILATION_UNIT in more conditionally-compiled files.* Remove useless pointer to Windows Help from system error messages.* Avoid newlines within Windows error messages. * Ensure unique association IDs if wrapped. * Simplify calc_addr_distance(). * Clamp min/maxpoll in edge cases in newpeer(). * Quiet local addr change logging when unpeering. * Correct missing arg for %s printf specifier in send_blocking_resp_internal(). * Suppress OpenSSL 3 deprecation warning clutter. * Correct OpenSSL usage in Autokey code to avoid warnings about discarding const qualifiers with OpenSSL 3. * Display KoD refid as text in recently added message. * Avoid running checkHtmlFileDates script repeatedly when no html/*.html files have changed. * Abort configure if --enable-crypto-rand given & unavailable. * Add configure --enable-verbose-ssl to trace SSL detection. * Add build test coverage for --disable-saveconfig to flock-build script. * Remove deprecated configure --with-arlib option. * Remove configure support for ISC UNIX ca. 1998. * Move NTP_OPENSSL and NTP_CRYPTO_RAND invocations from configure.ac files to NTP_LIBNTP. * Remove dead code: HAVE_U_INT32_ONLY_WITH_DNS. * Eliminate [v]snprintf redefinition warnings on macOS. * Fix clang 14 cast increases alignment warning on Linux. * Move ENABLE_CMAC to ntp_openssl.m4, reviving sntp/tests CMAC unit tests. * Use NTP_HARD_CPPFLAGS in libopts tearoff. * wire in --enable-build-framework-help---(4.2.8p17) 2023/06/06 Released by Harlan Stenn * [Bug 3824] Spurious "ntpd: daemon failed to notify parent!" logged at event_sync. Reported by Edward McGuire. * [Bug 3822] ntpd significantly delays first poll of servers specified by name. Miroslav Lichvar identified regression in 4.2.8p16.* [Bug 3821] 4.2.8p16 misreads hex authentication keys, won't interop with 4.2.8p15 or earlier. Reported by Matt Nordhoff, thanks to Miroslav Lichvar and Matt for rapid testing and identifying the problem. * Add tests/libntp/digests.c to catch regressions reading keys file or with symmetric authentication digest output. ---(4.2.8p16) 2023/05/31 Released by Harlan Stenn * [Sec 3808] Assertion failure in ntpq on malformed RT-11 date * [Sec 3807] praecis_parse() in the Palisade refclock driver has a hypothetical input buffer overflow. Reported by ... stenn@* [Sec 3806] libntp/mstolfp.c needs bounds checking - solved numerically instead of using string manipulation* [Sec 3767] An OOB KoD RATE value triggers an assertion when debug is enabled. * [Bug 3819] Updated libopts/Makefile.am was missing NTP_HARD_* values. * [Bug 3817] Bounds-check "tos floor" configuration. * [Bug 3814] First poll delay of new or cleared associations miscalculated. * [Bug 3802] ntp-keygen -I default identity modulus bits too small for OpenSSL 3. Reported by rmsh1216@163.com * [Bug 3801] gpsdjson refclock gps_open() device name mishandled. * [Bug 3800] libopts-42.1.17 does not compile with Microsoft C. * [Bug 3799] Enable libopts noreturn compiler advice for MSC. * [Bug 3797] Windows getaddrinfo w/AI_ADDRCONFIG fails for localhost when disconnected, breaking ntpq and ntpdc. * [Bug 3795] pollskewlist documentation uses | when it shouldn't. - ntp.conf manual page and miscopt.html corrections. * [Bug 3793] Wrong variable type passed to record_raw_stats(). - Report and patch by Yuezhen LUAN .* [Bug 3786] Timer starvation on high-load Windows ntpd. * [Bug 3784] high-load ntpd on Windows deaf after enough ICMP TTL exceeded. * [Bug 3781] log "Unable to listen for broadcasts" for IPv4 * [Bug 3774] mode 6 packets corrupted in rawstats file - Reported by Edward McGuire, fix identified by .* [Bug 3758] Provide a 'device' config statement for refclocks * [Bug 3757] Improve handling of Linux-PPS in NTPD * [Bug 3741] 4.2.8p15 can't build with glibc 2.34 * [Bug 3725] Make copyright of clk_wharton.c compatible with Debian. Philippe De Muyter * [Bug 3724] ntp-keygen with openSSL 1.1.1 fails on Windows - openssl applink needed again for openSSL-1.1.1* [Bug 3719] configure.ac checks for closefrom() and getdtablesize() missing. Reported by Brian Utterback, broken in 2010 by * [Bug 3699] Problems handling drift file and restoring previous drifts - command line options override config statements where applicable - make initial frequency settings idempotent and reversible - make sure kernel PLL gets a recovered drift componsation* [Bug 3695] Fix memory leak with ntpq on Windows Server 2019 * [Bug 3694] NMEA refclock seems to unnecessarily require location in messages - misleading title; essentially a request to ignore the receiver status. Added a mode bit for this. * [Bug 3693] Improvement of error handling key lengths - original patch by Richard Schmidt, with mods & unit test fixes* [Bug 3692] /dev/gpsN requirement prevents KPPS - implement/wrap 'realpath()' to resolve symlinks in device names* [Bug 3691] Buffer Overflow reading GPSD output - original patch by matt - increased max PDU size to 4k to avoid truncation* [Bug 3690] newline in ntp clock variable (parse) - patch by Frank Kardel* [Bug 3689] Extension for MD5, SHA-1 and other keys - ntp{q,dc} now use the same password processing as ntpd does in the key file, so having a binary secret >= 11 bytes is possible for all keys. (This is a different approach to the problem than suggested)* [Bug 3688] GCC 10 build errors in testsuite * [Bug 3687] ntp_crypto_rand RNG status not known - patch by Gerry Garvey* [Bug 3682] Fixes for warnings when compiled without OpenSSL - original patch by Gerry Garvey* [Bug 3677] additional peer events not decoded in associations listing - original patch by Gerry Garvey* [Bug 3676] compiler warnings (CMAC, interrupt_buf, typo, fallthrough) - applied patches by Gerry Garvey* [Bug 3675] ntpq ccmds[] stores pointer to non-persistent storage* [Bug 3674] ntpq command 'execute only' using '~' prefix - idea+patch by Gerry Garvey* [Bug 3672] fix biased selection in median cut * [Bug 3666] avoid unlimited receive buffer allocation - follow-up: fix inverted sense in check, reset shortfall counter* [Bug 3660] Revert 4.2.8p15 change to manycast. * [Bug 3640] document "discard monitor" and fix the code. - fixed bug identified by Edward McGuire * [Bug 3626] (SNTP) UTC offset calculation needs dst flag - applied patch by Gerry Garvey* [Bug 3428] ntpd spinning consuming CPU on Linux router with full table. Reported by Israel G. Lugo. * [Bug 3103] libopts zsave_warn format string too few arguments * [Bug 2990] multicastclient incorrectly causes bind to broadcast address. Integrated patch from Brian Utterback. * [Bug 2525] Turn on automake subdir-objects across the project. * [Bug 2410] syslog an error message on panic exceeded. * Use correct rounding in mstolfp(). perlinger/hart* M_ADDF should use u_int32. * Only define tv_fmt_libbuf() if we will use it. * Use recv_buffer instead of the longer recv_space.X_recv_buffer. hart/stenn* Make sure the value returned by refid_str() prints cleanly. * If DEBUG is enabled, the startup banner now says that debug assertions are in force and that ntpd will abort if any are violated. * syslog valid incoming KoDs. * Rename a poorly-named variable. * Disable "embedded NUL in string" messages in libopts, when we can. * Use https in the AC_INIT URLs in configure.ac. * Implement NTP_FUNC_REALPATH. * Lose a gmake construct in ntpd/Makefile.am. * upgrade to: autogen-5.18.16* upgrade to: libopts-42.1.17* upgrade to: autoconf-2.71* upgrade to: automake-1.16.15* Upgrade to libevent-2.1.12-stable * Support OpenSSL-3.0 List of files: /netbsd-src/external/bsd/ntp/dist/html/authentic.html

397d6dd69b7c53b00e1306290a03b5ac2143c4e2 - ---

Sat, 29 Sep 2018 17:28:34 +0000

---(4.2.8p12) 2018/08/14 Released by Harlan Stenn * [Sec 3505] CVE-2018-12327 - Arbitrary Code Execution Vulnerability - fixed stack buffer overflow in the openhost() command-line call of NTPQ/NTPDC * [Sec 3012] noepeer tweaks. * [Bug 3521] Fix a logic bug in the INVALIDNAK checks. * [Bug 3509] Add support for running as non-root on FreeBSD, Darwin, other TrustedBSD platforms - applied patch by Ian Lepore * [Bug 3506] Service Control Manager interacts poorly with NTPD - changed interaction with SCM to signal pending startup* [Bug 3486] Buffer overflow in ntpq/ntpq.c:tstflags() - applied patch by Gerry Garvey* [Bug 3485] Undefined sockaddr used in error messages in ntp_config.c - applied patch by Gerry Garvey* [Bug 3484] ntpq response from ntpd is incorrect when REFID is null - rework of ntpq 'nextvar()' key/value parsing* [Bug 3482] Fixes for compilation warnings (ntp_io.c & ntpq-subs.c) - applied patch by Gerry Garvey (with mods)* [Bug 3480] Refclock sample filter not cleared on clock STEP - applied patch by Gerry Garvey* [Bug 3479] ctl_putrefid() allows unsafe characters through to ntpq - applied patch by Gerry Garvey (with mods)* [Bug 3476]ctl_putstr() sends empty unquoted string [...] - applied patch by Gerry Garvey (with mods); not sure if that's bug or feature, though* [Bug 3475] modify prettydate() to suppress output of zero time - applied patch by Gerry Garvey* [Bug 3474] Missing pmode in mode7 peer info response - applied patch by Gerry Garvey* [Bug 3471] Check for openssl/[ch]mac.h. HStenn. - add #define ENABLE_CMAC support in configure. HStenn.* [Bug 3470] ntpd4.2.8p11 fails to compile without OpenSSL * [Bug 3469] Incomplete string compare [...] in is_refclk_addr - patch by Stephen Friedl* [Bug 3467] Potential memory fault in ntpq [...] - fixed IO redirection and CTRL-C handling in ntq and ntpdc* [Bug 3465] Default TTL values cannot be used * [Bug 3461] refclock_shm.c: clear error status on clock recovery - initial patch by Hal Murray; also fixed refclock_report() trouble* [Bug 3460] Fix typo in ntpq.texi, reported by Kenyon Ralph. * [Bug 3456] Use uintptr_t rather than size_t to store an integer in a pointer - According to Brooks Davis, there was only one location * [Bug 3449] ntpq - display "loop" instead of refid [...] - applied patch by Gerry Garvey* [Bug 3445] Symmetric peer won't sync on startup - applied patch by Gerry Garvey* [Bug 3442] Fixes for ntpdate as suggested by Gerry Garvey, with modifications New macro REFID_ISTEXT() which is also used in ntpd/ntp_control.c.* [Bug 3434] ntpd clears STA_UNSYNC on start - applied patch by Miroslav Lichvar* [Bug 3426] ntpdate.html -t default is 2 seconds. Leonid Evdokimov.* [Bug 3121] Drop root privileges for the forked DNS worker - integrated patch by Reinhard Max* [Bug 2821] minor build issues - applied patches by Christos Zoulas, including real bug fixes* html/authopt.html: cleanup, from * ntpd/ntpd.c: DROPROOT cleanup. * Symmetric key range is 1-65535. Update docs. * html/authentic.html: cleanup, from List of files: /netbsd-src/external/bsd/ntp/dist/html/authentic.html

56f2724e8b3d0a7f0bf50fb521c1043c1f9f007c - ---

Sat, 07 Apr 2018 00:15:40 +0000

---* [Sec 3454] Unauthenticated packet can reset authenticated interleave associations. HStenn.* [Sec 3453] Interleaved symmetric mode cannot recover from bad state. HStenn.* [Sec 3415] Permit blocking authenticated symmetric/passive associations. Implement ippeerlimit. HStenn, JPerlinger.* [Sec 3414] ntpq: decodearr() can write beyond its 'buf' limits - initial patch by , extended by * [Sec 3412] ctl_getitem(): Don't compare names past NUL. * [Sec 3012] Sybil vulnerability: noepeer support. HStenn, JPerlinger.* [Bug 3457] OpenSSL FIPS mode regression * [Bug 3455] ntpd doesn't use scope id when binding multicast - applied patch by Sean Haugh* [Bug 3452] PARSE driver prints uninitialized memory. * [Bug 3450] Dubious error messages from plausibility checks in get_systime() - removed error log caused by rounding/slew, ensured postcondition * [Bug 3447] AES-128-CMAC (fixes) - refactoring the MAC code, too* [Bug 3441] Validate the assumption that AF_UNSPEC is 0. stenn@ntp.org* [Bug 3439] When running multiple commands / hosts in ntpq... - applied patch by ggarvey* [Bug 3438] Negative values and values > 999 days in... - applied patch by ggarvey (with minor mods)* [Bug 3437] ntpd tries to open socket with AF_UNSPEC domain - applied patch (with mods) by Miroslav Lichvar * [Bug 3435] anchor NTP era alignment * [Bug 3433] sntp crashes when run with -a. * [Bug 3430] ntpq dumps core (SIGSEGV) for "keytype md2" - fixed several issues with hash algos in ntpd, sntp, ntpq, ntpdc and the test suites * [Bug 3424] Trimble Thunderbolt 1024 week millenium bug - initial patch by Daniel Pouzzner* [Bug 3423] QNX adjtime() implementation error checking is wrong * [Bug 3417] ntpq ifstats packet counters can be negative made IFSTATS counter quantities unsigned * [Bug 3411] problem about SIGN(6) packet handling for ntp-4.2.8p10 - raised receive buffer size to 1200 * [Bug 3408] refclock_jjy.c: Avoid a wrong report of the coverity static analysis tool. * [Bug 3405] update-leap.in: general cleanup, HTTPS support. Paul McMath.* [Bug 3404] Fix openSSL DLL usage under Windows - fix/drop assumptions on OpenSSL libs directory layout* [Bug 3399] NTP: linker error in 4.2.8p10 during Linux cross-compilation - initial patch by timeflies@mail2tor.com * [Bug 3398] tests fail with core dump - patch contributed by Alexander Bluhm* [Bug 3397] ctl_putstr() asserts that data fits in its buffer rework of formatting & data transfer stuff in 'ntp_control.c' avoids unecessary buffers and size limitations. * [Bug 3394] Leap second deletion does not work on ntpd clients - fixed handling of dynamic deletion w/o leap file * [Bug 3391] ntpd segfaults on startup due to small warmup thread stack size - increased mimimum stack size to 32kB * [Bug 3367] Faulty LinuxPPS NMEA clock support in 4.2.8 - reverted handling of PPS kernel consumer to 4.2.6 behavior* [Bug 3365] Updates driver40(-ja).html and miscopt.html * [Bug 3358] Spurious KoD log messages in .INIT. phase. HStenn.* [Bug 3016] wrong error position reported for bad ":config pool" - fixed location counter & ntpq output * [Bug 2900] libntp build order problem. HStenn.* [Bug 2878] Tests are cluttering up syslog * [Bug 2737] Wrong phone number listed for USNO. ntp-bugs@bodosom.net, perlinger@ntp.org* [Bug 2557] Fix Thunderbolt init. ntp-bugs@bodosom.net, perlinger@ntp.* [Bug 948] Trustedkey config directive leaks memory. * Use strlcpy() to copy strings, not memcpy(). HStenn.* Typos. HStenn.* test_ntp_scanner_LDADD needs ntpd/ntp_io.o. HStenn.* refclock_jjy.c: Add missing "%s" to an msyslog() call. HStenn.* Build ntpq and libntpq.a with NTP_HARD_*FLAGS. perlinger@ntp.org* Fix trivial warnings from 'make check'. perlinger@ntp.org* Fix bug in the override portion of the compiler hardening macro. HStenn.* record_raw_stats(): Log entire packet. Log writes. HStenn.* AES-128-CMAC support. BInglis, HStenn, JPerlinger.* sntp: tweak key file logging. HStenn.* sntp: pkt_output(): Improve debug output. HStenn.* update-leap: updates from Paul McMath.* When using pkg-config, report --modversion. HStenn.* Clean up libevent configure checks. HStenn.* sntp: show the IP of who sent us a crypto-NAK. HStenn.* Allow .../N to specify subnet bits for IPs in ntp.keys. HStenn, JPerlinger.* authistrustedip() - use it in more places. HStenn, JPerlinger.* New sysstats: sys_lamport, sys_tsrounding. HStenn.* Update ntp.keys .../N documentation. HStenn.* Distribute testconf.yml. HStenn.* Add DPRINTF(2,...) lines to receive() for packet drops. HStenn.* Rename the configuration flag fifo variables. HStenn.* Improve saveconfig output. HStenn.* Decode restrict flags on receive() debug output. HStenn.* Decode interface flags on receive() debug output. HStenn.* Warn the user if deprecated "driftfile name WanderThreshold" is used. HStenn.* Update the documentation in ntp.conf.def . HStenn.* restrictions() must return restrict flags and ippeerlimit. HStenn.* Update ntpq peer documentation to describe the 'p' type. HStenn.* Rename restrict 'flags' to 'rflags. Use an enum for the values. HStenn.* Provide dump_restricts() for debugging. HStenn.* Use consistent 4th arg type for [gs]etsockopt. JPerlinger.* Some tests might need LIBM. HStenn.* update-leap: Allow -h/--help early. HStenn. List of files: /netbsd-src/external/bsd/ntp/dist/html/authentic.html

ae49d4a49caccbdfd531038cf6df30db15663d73 - ---

Sun, 01 May 2016 15:57:23 +0000

---(4.2.8p7) 2016/04/26 Released by Harlan Stenn * [Sec 2901] KoD packets must have non-zero transmit timestamps. HStenn.* [Sec 2936] Skeleton Key: Any system knowing the trusted key can serve time. Include passive servers in this check. HStenn.* [Sec 2945] Additional KoD packet checks. HStenn.* [Sec 2978] Interleave can be partially triggered. HStenn.* [Sec 3007] Validate crypto-NAKs. Danny Mayer.* [Sec 3008] Always check the return value of ctl_getitem(). - initial work by HStenn - Additional cleanup of ctl_getitem by perlinger@ntp.org* [Sec 3009] Crafted addpeer with hmode > 7 causes OOB error. perlinger@ntp.org - added more stringent checks on packet content* [Sec 3010] remote configuration trustedkey/requestkey values are not properly validated. perlinger@ntp.org - sidekick: Ignore keys that have an unsupported MAC algorithm but are otherwise well-formed* [Sec 3011] Duplicate IPs on unconfig directives will cause an assertion botch - graciously accept the same IP multiple times. perlinger@ntp.org* [Sec 3020] Refclock impersonation. HStenn.* [Bug 2831] Segmentation Fault in DNS lookup during startup. perlinger@ntp.org - fixed yet another race condition in the threaded resolver code.* [Bug 2858] bool support. Use stdbool.h when available. HStenn.* [Bug 2879] Improve NTP security against timing attacks. perlinger@ntp.org - integrated patches by Loganaden Velvidron with some modifications & unit tests* [Bug 2952] Symmetric active/passive mode is broken. HStenn.* [Bug 2960] async name resolution fixes for chroot() environments. Reinhard Max.* [Bug 2994] Systems with HAVE_SIGNALED_IO fail to compile. perlinger@ntp.org* [Bug 2995] Fixes to compile on Windows* [Bug 2999] out-of-bounds access in 'is_safe_filename()'. perlinger@ntp.org* [Bug 3013] Fix for ssl_init.c SHA1 test. perlinger@ntp.org - Patch provided by Ch. Weisgerber* [Bug 3015] ntpq: config-from-file: "request contains an unprintable character" - A change related to [Bug 2853] forbids trailing white space in remote config commands. perlinger@ntp.org* [Bug 3019] NTPD stops processing packets after ERROR_HOST_UNREACHABLE - report and patch from Aleksandr Kostikov. - Overhaul of Windows IO completion port handling. perlinger@ntp.org* [Bug 3022] authkeys.c should be refactored. perlinger@ntp.org - fixed memory leak in access list (auth[read]keys.c) - refactored handling of key access lists (auth[read]keys.c) - reduced number of error branches (authreadkeys.c)* [Bug 3023] ntpdate cannot correct dates in the future. perlinger@ntp.org* [Bug 3030] ntpq needs a general way to specify refid output format. HStenn.* [Bug 3031] ntp broadcastclient unable to synchronize to an server when the time of server changed. perlinger@ntp.org - Check the initial delay calculation and reject/unpeer the broadcast server if the delay exceeds 50ms. Retry again after the next broadcast packet.* [Bug 3036] autokey trips an INSIST in authistrustedip(). Harlan Stenn.* Document ntp.key's optional IP list in authenetic.html. Harlan Stenn.* Update html/xleave.html documentation. Harlan Stenn.* Update ntp.conf documentation. Harlan Stenn.* Fix some Credit: attributions in the NEWS file. Harlan Stenn.* Fix typo in html/monopt.html. Harlan Stenn.* Add README.pullrequests. Harlan Stenn.* Cleanup to include/ntp.h. Harlan Stenn.---(4.2.8p6) 2016/01/20 Released by Harlan Stenn * [Sec 2935] Deja Vu: Replay attack on authenticated broadcast mode. HStenn.* [Sec 2936] Skeleton Key: Any trusted key system can serve time. HStenn.* [Sec 2937] ntpq: nextvar() missing length check. perlinger@ntp.org* [Sec 2938] ntpq saveconfig command allows dangerous characters in filenames. perlinger@ntp.org* [Sec 2939] reslist NULL pointer dereference. perlinger@ntp.org* [Sec 2940] Stack exhaustion in recursive traversal of restriction list. perlinger@ntp.org* [Sec 2942]: Off-path DoS attack on auth broadcast mode. HStenn.* [Sec 2945] Zero Origin Timestamp Bypass. perlinger@ntp.org* [Sec 2948] Potential Infinite Loop in ntpq ( and ntpdc) perlinger@ntp.org* [Bug 2772] adj_systime overflows tv_usec. perlinger@ntp.org* [Bug 2814] msyslog deadlock when signaled. perlinger@ntp.org - applied patch by shenpeng11@huawei.com with minor adjustments* [Bug 2882] Look at ntp_request.c:list_peers_sum(). perlinger@ntp.org* [Bug 2891] Deadlock in deferred DNS lookup framework. perlinger@ntp.org* [Bug 2892] Several test cases assume IPv6 capabilities even when IPv6 is disabled in the build. perlinger@ntp.org - Found this already fixed, but validation led to cleanup actions.* [Bug 2905] DNS lookups broken. perlinger@ntp.org - added limits to stack consumption, fixed some return code handling* [Bug 2971] ntpq bails on ^C: select fails: Interrupted system call - changed stacked/nested handling of CTRL-C. perlinger@ntp.org - make CTRL-C work for retrieval and printing od MRU list. perlinger@ntp.org* [Bug 2980] reduce number of warnings. perlinger@ntp.org - integrated several patches from Havard Eidnes (he@uninett.no)* [Bug 2985] bogus calculation in authkeys.c perlinger@ntp.org - implement 'auth_log2()' using integer bithack instead of float calculation* Make leapsec_query debug messages less verbose. Harlan Stenn.* Disable incomplete t-ntp_signd.c test. Harlan Stenn.--- List of files: /netbsd-src/external/bsd/ntp/dist/html/authentic.html

b8ecfcfef0e343ad71faea7a54fb5fcb42ad4e27 - Import ntp 4.2.8

Fri, 19 Dec 2014 20:37:31 +0000

Import ntp 4.2.8 List of files: /netbsd-src/external/bsd/ntp/dist/html/authentic.html

8585484ef87f5a04d32332313cdb799625f4faf8 - import devel ntpd to avoid amplification attacks.

Fri, 27 Dec 2013 23:30:11 +0000

import devel ntpd to avoid amplification attacks. List of files: /netbsd-src/external/bsd/ntp/dist/html/authentic.html