cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
openbsd-ports/net/ntp/Makefile

59 lines
1.7 KiB
Makefile
Raw Normal View History

bump ports known/suspected to be affected by issue with libedit/libreadline and termcap on lld arches.
2018-11-14 20:48:21 +00:00
# $OpenBSD: Makefile,v 1.77 2018/11/14 20:48:21 sthen Exp $
Simplify
2001-03-16 16:35:19 +00:00
Update to 4.2.4p6. Kill the multi-packaging. xntpd is useless without documentation and if you want a simple NTP server on a tiny machine, use OpenNTPD.
2009-01-27 10:21:38 +00:00
COMMENT= Network Time Protocol reference implementation
The Network Time Protocol (NTP) is used to synchronize the time of a computer client or server to another server or reference time source. (ok espie@)
2001-02-07 17:43:21 +00:00
security update to ntp-4.2.8p2 http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities CVE-2015-1798 "When ntpd is configured to use a symmetric key to authenticate a remote NTP server/peer, it checks if the NTP message authentication code (MAC) in received packets is valid, but not if there actually is any MAC included." CVE-2015-1799 "An attacker knowing that NTP hosts A and B are peering with each other (symmetric association) can send a packet to host A with source address of B which will set the NTP state variables on A to the values sent by the attacker. Host A will then send on its next poll to B a packet with originate timestamp that doesn't match the transmit timestamp of B and the packet will be dropped. If the attacker does this periodically for both hosts, they won't be able to synchronize to each other."
2015-04-08 14:12:44 +00:00
# NTP sometimes has a 'pN' in its version number, which we don't want
# to confuse with the ports system's 'pN' convention, so convert it to
# 'pl' for local use.
update to 4.2.4p5; based on a submission by Wim Lewis <wiml@hhhh.org>
2009-01-26 23:26:02 +00:00
Update ntp to 4.2.8p10. CVE-2016-9042, CVE-2017-6451, CVE-2017-6452, CVE-2017-6455, CVE-2017-6458, CVE-2017-6459, CVE-2017-6460, CVE-2017-6462, CVE-2017-6463, CVE-2017-6464 Adapt OpenSSL #ifdef for LibreSSL. Fix regression tests, prevent them from crashing. OK deraadt@
2017-03-27 11:33:40 +00:00
VERSION= 4.2.8p10
bump ports known/suspected to be affected by issue with libedit/libreadline and termcap on lld arches.
2018-11-14 20:48:21 +00:00
REVISION= 4
Update to ntp-4.2.8, fixes for several CVEs. - Weak default key in config_auth() - CVE-2014-9293 - non-cryptographic random number generator with weak seed used by ntp-keygen to generate symmetric keys - CVE-2014-9294 - Buffer overflow in crypto_recv() - CVE-2014-9295 - Buffer overflow in ctl_putdata() - CVE-2014-9295 - Buffer overflow in configure() - CVE-2014-9295 - receive(): missing return on error - CVE-2014-9296 ok naddy@
2014-12-24 13:10:20 +00:00
DISTNAME= ntp-${VERSION}
update to 4.2.6p1 and remove a lot of cruft
2010-07-03 02:49:43 +00:00
PKGNAME= ntp-${VERSION:S/p/pl/}
resolve conflicts from last import
2004-06-05 04:54:53 +00:00
CATEGORIES= net
HOMEPAGE= http://www.ntp.org/
add a second MASTER_SITES, archive.ntp.org seems unhappy
2015-07-01 11:59:24 +00:00
MASTER_SITES= http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2/ \
http://archive.ntp.org/ntp4/ntp-4.2/
update to 4.2.6p1 and remove a lot of cruft
2010-07-03 02:49:43 +00:00
# modified ISC
PERMIT_PACKAGE_CDROM= Yes
resolve conflicts from last import
2004-06-05 04:54:53 +00:00
Update to ntp-4.2.8, fixes for several CVEs. - Weak default key in config_auth() - CVE-2014-9293 - non-cryptographic random number generator with weak seed used by ntp-keygen to generate symmetric keys - CVE-2014-9294 - Buffer overflow in crypto_recv() - CVE-2014-9295 - Buffer overflow in ctl_putdata() - CVE-2014-9295 - Buffer overflow in configure() - CVE-2014-9295 - receive(): missing return on error - CVE-2014-9296 ok naddy@
2014-12-24 13:10:20 +00:00
WANTLIB += c crypto edit event_core event_pthreads
Update ports/net/ntp to 4.2.7p418. This is ntp.org's ntp daemon, *not* the base system's openntpd. Update removes a reflected unauthenticated DoS attack vector that has been hit a lot in the wild recently, see http://www.openntpproject.org/ UDP traffic amplification 19x. This is a devel version from upstream, they have decided not to fix it in the stable branch. Users running older versions should add "disable monitor" to their config and restart, then verify that "monlist" in ntpdc does not return a list. ok aja@, missing build dep spotted by naddy
2014-02-09 21:36:46 +00:00
WANTLIB += m pthread ssl termcap
update to 4.2.6p1 and remove a lot of cruft
2010-07-03 02:49:43 +00:00
update to 4.2.6p2, which incorporates most of our patches
2010-07-10 19:48:32 +00:00
# enabling SEPARATE_BUILD causes the parser to be rebuilt .y -> .c,
# which requires bison
resolve conflicts from last import
2004-06-05 04:54:53 +00:00
use AC_LANG_SOURCE instead of AC_LANG_PROGRAM to avoid a nested function definition
2017-09-25 12:41:07 +00:00
CONFIGURE_STYLE= autoconf
AUTOCONF_VERSION= 2.69
Update ports/net/ntp to 4.2.7p418. This is ntp.org's ntp daemon, *not* the base system's openntpd. Update removes a reflected unauthenticated DoS attack vector that has been hit a lot in the wild recently, see http://www.openntpproject.org/ UDP traffic amplification 19x. This is a devel version from upstream, they have decided not to fix it in the stable branch. Users running older versions should add "disable monitor" to their config and restart, then verify that "monlist" in ntpdc does not return a list. ok aja@, missing build dep spotted by naddy
2014-02-09 21:36:46 +00:00
CONFIGURE_ARGS= --docdir=${TRUEPREFIX}/share/doc/ntp \
--enable-parse-clocks \
--with-binsubdir=sbin \
--without-ntpsnmpd
update to 4.2.6p1 and remove a lot of cruft
2010-07-03 02:49:43 +00:00
CONFIGURE_ENV= CPPFLAGS='-DCONFIG_FILE="\"${SYSCONFDIR}/ntp.conf\"" \
disable ntpd's audio support for now (it's used for feeding audio from a radio receiver tuned to WWV or CHU time signal stations, but doesn't build with recent changes to audio support)
2015-06-26 20:21:07 +00:00
-DKEYFILE="\"${SYSCONFDIR}/ntp.keys\""' \
ac_cv_header_sys_audioio_h=no
update to 4.2.6p1 and remove a lot of cruft
2010-07-03 02:49:43 +00:00
Update ports/net/ntp to 4.2.7p418. This is ntp.org's ntp daemon, *not* the base system's openntpd. Update removes a reflected unauthenticated DoS attack vector that has been hit a lot in the wild recently, see http://www.openntpproject.org/ UDP traffic amplification 19x. This is a devel version from upstream, they have decided not to fix it in the stable branch. Users running older versions should add "disable monitor" to their config and restart, then verify that "monlist" in ntpdc does not return a list. ok aja@, missing build dep spotted by naddy
2014-02-09 21:36:46 +00:00
LIB_DEPENDS= devel/libevent2
Security update to 4.2.8p9: CVE-2016-9311: Trap crash CVE-2016-9310: Mode 6 unauthenticated trap information disclosure and DDoS vector CVE-2016-7427: Broadcast Mode Replay Prevention DoS CVE-2016-7428: Broadcast Mode Poll Interval Enforcement DoS CVE-2016-9312: Windows: ntpd DoS by oversized UDP packet CVE-2016-7431: Regression: 010-origin: Zero Origin Timestamp Bypass CVE-2016-7434: Null pointer dereference in _IO_str_init_static_internal() CVE-2016-7429: Interface selection attack CVE-2016-7426: Client rate limiting and server responses CVE-2016-7433: Reboot sync calculation problem
2016-12-14 20:05:37 +00:00
# autogen >= 5.18.5 required to regenerate outdated files because
# the distribution tarball was updated incompletely
post-extract:
@touch ${WRKDIR}/timestamp
@find ${WRKSRC} -type f -print0 | xargs -0 touch -r ${WRKDIR}/timestamp
Update ntp to 4.2.8p10. CVE-2016-9042, CVE-2017-6451, CVE-2017-6452, CVE-2017-6455, CVE-2017-6458, CVE-2017-6459, CVE-2017-6460, CVE-2017-6462, CVE-2017-6463, CVE-2017-6464 Adapt OpenSSL #ifdef for LibreSSL. Fix regression tests, prevent them from crashing. OK deraadt@
2017-03-27 11:33:40 +00:00
# patch-sntp_tests_packetProcessing_c triggers a ruby script to regenerate
# run-packetProcessing.c. Avoid ruby, run file does not change anyway.
Update ports/net/ntp to 4.2.7p418. This is ntp.org's ntp daemon, *not* the base system's openntpd. Update removes a reflected unauthenticated DoS attack vector that has been hit a lot in the wild recently, see http://www.openntpproject.org/ UDP traffic amplification 19x. This is a devel version from upstream, they have decided not to fix it in the stable branch. Users running older versions should add "disable monitor" to their config and restart, then verify that "monlist" in ntpdc does not return a list. ok aja@, missing build dep spotted by naddy
2014-02-09 21:36:46 +00:00
post-patch:
cp ${WRKSRC}/sntp/loc/freebsd ${WRKSRC}/sntp/loc/openbsd
Update ntp to 4.2.8p10. CVE-2016-9042, CVE-2017-6451, CVE-2017-6452, CVE-2017-6455, CVE-2017-6458, CVE-2017-6459, CVE-2017-6460, CVE-2017-6462, CVE-2017-6463, CVE-2017-6464 Adapt OpenSSL #ifdef for LibreSSL. Fix regression tests, prevent them from crashing. OK deraadt@
2017-03-27 11:33:40 +00:00
touch ${WRKSRC}/sntp/tests/run-packetProcessing.c
Update ports/net/ntp to 4.2.7p418. This is ntp.org's ntp daemon, *not* the base system's openntpd. Update removes a reflected unauthenticated DoS attack vector that has been hit a lot in the wild recently, see http://www.openntpproject.org/ UDP traffic amplification 19x. This is a devel version from upstream, they have decided not to fix it in the stable branch. Users running older versions should add "disable monitor" to their config and restart, then verify that "monlist" in ntpdc does not return a list. ok aja@, missing build dep spotted by naddy
2014-02-09 21:36:46 +00:00
resolve conflicts from last import
2004-06-05 04:54:53 +00:00
post-install:
${INSTALL_DATA_DIR} ${PREFIX}/share/examples/ntp
@cd ${WRKSRC}/conf && pax -rw * ${PREFIX}/share/examples/ntp
.include <bsd.port.mk>
Reference in New Issue Copy Permalink