ntp: security bump to verserion 4.2.8p9
authorAdam Duskett <Aduskett@gmail.com>
Mon, 6 Feb 2017 14:12:25 +0000 (09:12 -0500)
committerPeter Korsgaard <peter@korsgaard.com>
Tue, 7 Feb 2017 14:26:22 +0000 (15:26 +0100)
commitebf6f64b76059e31a85f982cb04f80ad5982dac3
treebb181ceedfcaf1b3f579becebd40855cd4fcf43d
parent60a94a39d95602f945f976609712da6be9092280
ntp: security bump to verserion 4.2.8p9

This version of ntp fixes several vulnerabilities.

CVE-2016-9311
CVE-2016-9310
CVE-2016-7427
CVE-2016-7428
CVE-2016-9312
CVE-2016-7431
CVE-2016-7434
CVE-2016-7429
CVE-2016-7426
CVE-2016-7433

http://www.kb.cert.org/vuls/id/633847

In addition, libssl_compat.h is now included in many files, which
references openssl/evp.h, openssl/dsa.h, and openssl/rsa.h.
Even if a you pass --disable-ssl as a configuration option, these
files are now required.

As such, I have also added openssl as a dependency, and it is now
automatically selected when you select ntp.

Signed-off-by: Adam Duskett <aduskett@codeblue.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/ntp/Config.in
package/ntp/ntp.hash
package/ntp/ntp.mk