From 643af798cc12806b479379640451dddd789c0027 Mon Sep 17 00:00:00 2001 From: Gustavo Zacarias Date: Wed, 1 Jul 2015 07:47:15 -0300 Subject: [PATCH] ntp: security bump to version 4.2.8p3 Fixes: CVE-2015-5146 - ntpd control message crash: Crafted NUL-byte in configuration directive. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni --- package/ntp/ntp.hash | 6 ++++-- package/ntp/ntp.mk | 2 +- 2 files changed, 5 insertions(+), 3 deletions(-) diff --git a/package/ntp/ntp.hash b/package/ntp/ntp.hash index fe5193202f..d23146f59c 100644 --- a/package/ntp/ntp.hash +++ b/package/ntp/ntp.hash @@ -1,2 +1,4 @@ -# From http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2/ntp-4.2.8p2.tar.gz.md5 -md5 fa37049383316322d060ec9061ac23a9 ntp-4.2.8p2.tar.gz +# From http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2/ntp-4.2.8p3.tar.gz.md5 +md5 b98b0cbb72f6df04608e1dd5f313808b ntp-4.2.8p3.tar.gz +# Calculated based on the hash above +sha256 818ca4f2ed6ca845b1c5ec43f5e6ad905eaa0fc0aab2d509ed6b962a37fbf38f ntp-4.2.8p3.tar.gz diff --git a/package/ntp/ntp.mk b/package/ntp/ntp.mk index 36fc537920..5f05508133 100644 --- a/package/ntp/ntp.mk +++ b/package/ntp/ntp.mk @@ -5,7 +5,7 @@ ################################################################################ NTP_VERSION_MAJOR = 4.2 -NTP_VERSION = $(NTP_VERSION_MAJOR).8p2 +NTP_VERSION = $(NTP_VERSION_MAJOR).8p3 NTP_SITE = http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-$(NTP_VERSION_MAJOR) NTP_DEPENDENCIES = host-pkgconf libevent $(if $(BR2_PACKAGE_BUSYBOX),busybox) NTP_LICENSE = ntp license -- 2.30.2