Hello community, here is the log from the commit of package ntp for openSUSE:Factory checked in at 2018-10-22 11:01:34 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ntp (Old) and /work/SRC/openSUSE:Factory/.ntp.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ntp" Mon Oct 22 11:01:34 2018 rev:116 rq:640670 version:4.2.8p12 Changes: -------- --- /work/SRC/openSUSE:Factory/ntp/ntp.changes 2018-04-30 22:52:22.670824669 +0200 +++ /work/SRC/openSUSE:Factory/.ntp.new/ntp.changes 2018-10-22 11:01:55.200348628 +0200 @@ -1,0 +2,12 @@ +Tue Sep 11 12:24:52 UTC 2018 - [email protected] + +- Update to 4.2.8p12 + * CVE-2018-12327, bsc#1098531: fixed stack buffer overflow in + the openhost() command-line call of NTPQ/NTPDC. + * Add further tweaks to improve the fix for CVE-2018-7170, + bsc#1083424. + * ntp-usrgrp-resolver.patch was integrated upstream. +- Don't run autoreconf anymore and remove all related hacks and + BuildRequires. + +------------------------------------------------------------------- Old: ---- ntp-4.2.8p11.tar.gz ntp-usrgrp-resolver.patch New: ---- ntp-4.2.8p12.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ntp.spec ++++++ --- /var/tmp/diff_new_pack.AIDGTy/_old 2018-10-22 11:02:03.212341662 +0200 +++ /var/tmp/diff_new_pack.AIDGTy/_new 2018-10-22 11:02:03.216341659 +0200 @@ -23,7 +23,7 @@ %define ntpfaqversion 3.4 Name: ntp -Version: 4.2.8p11 +Version: 4.2.8p12 Release: 0 Summary: Network Time Protocol daemon (version 4) License: (MIT and BSD-3-Clause and BSD-4-Clause) and GPL-2.0 @@ -57,19 +57,16 @@ Patch20: ntp-sntp-dst.patch Patch21: ntp-4.2.6p2-ntpq-speedup-782060.patch Patch24: ntp-daemonize.patch -Patch25: ntp-usrgrp-resolver.patch Patch27: ntp-netlink.patch Patch29: ntp-pathfind.patch Patch30: ntp-move-kod-file.patch Patch32: ntp-reproducible.patch Patch33: ntp-sntp-libevent.patch -BuildRequires: autoconf BuildRequires: avahi-compat-mDNSResponder-devel BuildRequires: fdupes BuildRequires: libcap-devel BuildRequires: libevent-devel -BuildRequires: libtool BuildRequires: openssl-devel %if 0%{?suse_version} > 1320 || 0%{?sle_version} >= 120200 BuildRequires: pps-tools-devel @@ -139,7 +136,6 @@ %patch20 -p1 %patch21 %patch24 -%patch25 %patch27 %patch29 %patch30 @@ -148,11 +144,8 @@ # fix DOS line breaks sed -i 's/\r//g' html/scripts/{footer.txt,style.css} -# new automake 1.13 has removed old macro -sed -i 's/AM_CONFIG_HEADER/AC_CONFIG_HEADERS/' configure.ac %build -autoreconf -fvi export RPM_OPT_FLAGS="$RPM_OPT_FLAGS -W -DOPENSSL_LOAD_CONF -Wall -Wstrict-prototypes -Wpointer-arith -Wno-unused-parameter -fno-strict-aliasing -fstack-protector" %ifarch alpha s390x export RPM_OPT_FLAGS="$RPM_OPT_FLAGS -O0" ++++++ ntp-4.2.8p11.tar.gz -> ntp-4.2.8p12.tar.gz ++++++ /work/SRC/openSUSE:Factory/ntp/ntp-4.2.8p11.tar.gz /work/SRC/openSUSE:Factory/.ntp.new/ntp-4.2.8p12.tar.gz differ: char 5, line 1 ++++++ ntp-daemonize.patch ++++++ --- /var/tmp/diff_new_pack.AIDGTy/_old 2018-10-22 11:02:03.356341537 +0200 +++ /var/tmp/diff_new_pack.AIDGTy/_new 2018-10-22 11:02:03.360341534 +0200 @@ -1,8 +1,6 @@ -Index: ntpd/ntpd.c -=================================================================== --- ntpd/ntpd.c.orig +++ ntpd/ntpd.c -@@ -690,16 +690,17 @@ ntpdmain( +@@ -913,16 +913,17 @@ ntpdmain( /* make sure the FDs are initialised */ pipe_fds[0] = -1; pipe_fds[1] = -1; @@ -27,7 +25,7 @@ if (pipe(pipe_fds)) { exit_code = (errno) ? errno : -1; msyslog(LOG_ERR, -@@ -707,7 +708,7 @@ ntpdmain( +@@ -930,7 +931,7 @@ ntpdmain( exit(exit_code); } waitsync_fd_to_close = pipe_fds[1]; @@ -36,9 +34,9 @@ # endif /* HAVE_WORKING_FORK */ init_lib(); -@@ -1240,6 +1241,20 @@ int scmp_sc[] = { - } - #endif /* LIBSECCOMP and KERN_SECCOMP */ +@@ -1351,6 +1352,20 @@ int scmp_sc[] = { + ntservice_isup(); + #endif +#ifdef HAVE_WORKING_FORK + if (!nofork && wait_sync == 0 && waitsync_fd_to_close != -1) { @@ -57,7 +55,7 @@ # ifdef HAVE_IO_COMPLETION_PORT for (;;) { -@@ -1436,11 +1451,17 @@ wait_child_sync_if( +@@ -1547,11 +1562,17 @@ wait_child_sync_if( fd_set readset; struct timeval wtimeout; ++++++ ntp-sntp-libevent.patch ++++++ --- /var/tmp/diff_new_pack.AIDGTy/_old 2018-10-22 11:02:03.376341520 +0200 +++ /var/tmp/diff_new_pack.AIDGTy/_new 2018-10-22 11:02:03.376341520 +0200 @@ -53,7 +53,7 @@ p_SNTP_PRETEND_TIME = getenv("SNTP_PRETEND_TIME"); if (p_SNTP_PRETEND_TIME) { -@@ -1513,98 +1512,3 @@ libevent_version_ok(void) +@@ -1513,101 +1512,6 @@ libevent_version_ok(void) } return 1; } @@ -152,3 +152,6 @@ -#endif -} - + /* Dummy function to satisfy libntp/work_fork.c */ + int + set_user_group_ids(
