chrony: security bump to version 2.2.1
authorJames Knight <james.knight@rockwellcollins.com>
Thu, 11 Feb 2016 22:13:06 +0000 (17:13 -0500)
committerPeter Korsgaard <peter@korsgaard.com>
Thu, 11 Feb 2016 22:16:16 +0000 (23:16 +0100)
Fixes:

CVE-2016-1567: Impersonation between authenticated peers.

Signed-off-by: James Knight <james.knight@rockwellcollins.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/chrony/chrony.hash
package/chrony/chrony.mk

index 066ecb50bdf1e844e294b46af7f69f89ce33e775..fb8a65575970ab8247fe7a1b08e578d6770c7e05 100644 (file)
@@ -1,3 +1,3 @@
-# From http://listengine.tuxfamily.org/chrony.tuxfamily.org/chrony-announce/2015/10/msg00002.html
-md5  17bc77d3d2ce942675f9600b60452717         chrony-2.2.tar.gz
-sha1 eed81b53ef504430128a3a6fa5b56f7ee2fdf2b1 chrony-2.2.tar.gz
+# From http://listengine.tuxfamily.org/chrony.tuxfamily.org/chrony-announce/2016/01/msg00000.html
+md5  ce46990540aab3670d093311ee43fe17         chrony-2.2.1.tar.gz
+sha1 290b761478dc90d4921c98b7030ead07c49f2afd chrony-2.2.1.tar.gz
index aa7306f32fc331c601ea8c73c1d60b3ef9e192a6..369d7eb31497fa6988929ac3503b71bcf2d2d04f 100644 (file)
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-CHRONY_VERSION = 2.2
+CHRONY_VERSION = 2.2.1
 CHRONY_SITE = http://download.tuxfamily.org/chrony
 CHRONY_LICENSE = GPLv2
 CHRONY_LICENSE_FILES = COPYING