NTP 4.2.8p5
Focus: Security, Bug fixes, enhancements.
Severity: MEDIUM
In addition to bug fixes and enhancements, this release fixes the
following medium-severity vulnerability:
* Small-step/big-step. Close the panic gate earlier.
References: Sec 2956, CVE-2015-5300
Affects: All ntp-4 releases up to, but not including 4.2.8p5, and
4.3.0 up to, but not including 4.3.78
CVSS3: (AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:L) Base Score: 4.0, MEDIUM
Summary: If ntpd is always started with the -g option, which is
common and against long-standing recommendation, and if at the
moment ntpd is restarted an attacker can immediately respond to
enough requests from enough sources trusted by the target, which
is difficult and not common, there is a window of opportunity
where the attacker can cause ntpd to set the time to an
arbitrary value. Similarly, if an attacker is able to respond
to enough requests from enough sources trusted by the target,
the attacker can cause ntpd to abort and restart, at which
point it can tell the target to set the time to an arbitrary
value if and only if ntpd was re-started against long-standing
recommendation with the -g flag, or if ntpd was not given the
-g flag, the attacker can move the target system's time by at
most 900 seconds' time per attack.
Mitigation:
Configure ntpd to get time from multiple sources.
Upgrade to 4.2.8p5, or later, from the NTP Project Download
Page or the NTP Public Services Project Download Page
As we've long documented, only use the -g option to ntpd in
cold-start situations.
Monitor your ntpd instances.
Credit: This weakness was discovered by Aanchal Malhotra,
Isaac E. Cohen, and Sharon Goldberg at Boston University.
NOTE WELL: The -g flag disables the limit check on the panic_gate
in ntpd, which is 900 seconds by default. The bug identified by
the researchers at Boston University is that the panic_gate
check was only re-enabled after the first change to the system
clock that was greater than 128 milliseconds, by default. The
correct behavior is that the panic_gate check should be
re-enabled after any initial time correction.
If an attacker is able to inject consistent but erroneous time
responses to your systems via the network or "over the air",
perhaps by spoofing radio, cellphone, or navigation satellite
transmissions, they are in a great position to affect your
system's clock. There comes a point where your very best
defenses include:
Configure ntpd to get time from multiple sources.
Monitor your ntpd instances.
Other fixes:
* Coverity submission process updated from Coverity 5 to Coverity 7.
The NTP codebase has been undergoing regular Coverity scans on an
ongoing basis since 2006. As part of our recent upgrade from
Coverity 5 to Coverity 7, Coverity identified 16 nits in some of
the newly-written Unity test programs. These were fixed.
* [Bug 2829] Clean up pipe_fds in ntpd.c perlinger@ntp.org
* [Bug 2887] stratum -1 config results as showing value 99
- fudge stratum should only accept values [0..16]. perlinger@ntp.org
* [Bug 2932] Update leapsecond file info in miscopt.html. CWoodbury, HStenn.
* [Bug 2934] tests/ntpd/t-ntp_scanner.c has a magic constant wired in. HMurray
* [Bug 2944] errno is not preserved properly in ntpdate after sendto call.
- applied patch by Christos Zoulas. perlinger@ntp.org
* [Bug 2952] Peer associations broken by fix for Bug 2901/CVE-2015-7704.
* [Bug 2954] Version 4.2.8p4 crashes on startup on some OSes.
- fixed data race conditions in threaded DNS worker. perlinger@ntp.org
- limit threading warm-up to linux; FreeBSD bombs on it. perlinger@ntp.org
* [Bug 2957] 'unsigned int' vs 'size_t' format clash. perlinger@ntp.org
- accept key file only if there are no parsing errors
- fixed size_t/u_int format clash
- fixed wrong use of 'strlcpy'
* [Bug 2958] ntpq: fatal error messages need a final newline. Craig Leres.
* [Bug 2962] truncation of size_t/ptrdiff_t on 64bit targets. perlinger@ntp.org
- fixed several other warnings (cast-alignment, missing const, missing prototypes)
- promote use of 'size_t' for values that express a size
- use ptr-to-const for read-only arguments
- make sure SOCKET values are not truncated (win32-specific)
- format string fixes
* [Bug 2965] Local clock didn't work since 4.2.8p4. Martin Burnicki.
* [Bug 2967] ntpdate command suffers an assertion failure
- fixed ntp_rfc2553.c to return proper address length. perlinger@ntp.org
* [Bug 2969] Seg fault from ntpq/mrulist when looking at server with
lots of clients. perlinger@ntp.org
* [Bug 2971] ntpq bails on ^C: select fails: Interrupted system call
- changed stacked/nested handling of CTRL-C. perlinger@ntp.org
* Unity cleanup for FreeBSD-6.4. Harlan Stenn.
* Unity test cleanup. Harlan Stenn.
* Libevent autoconf pthread fixes for FreeBSD-10. Harlan Stenn.
* Header cleanup in tests/sandbox/uglydate.c. Harlan Stenn.
* Header cleanup in tests/libntp/sfptostr.c. Harlan Stenn.
* Quiet a warning from clang. Harlan Stenn.
Upstream changes:
# 2014-09-21 - Version 2.3.1
- Fixed message "Warning in formatC(Signif) : class of 'x' was discarded"
- Fixed problem looking up objects in Sweave. R Code inside
Sweave files is now evaluated in .GlobalEnv, again, as
before version 2.3.0.
# 2014-09-06 - Version 2.3
- API BREAK: Make package conform to new CRAN policies.
- .HTML.file is no longer stored in the global environment:
use HTMLSetFile() and HTMLGetFile() instead of modifying it directly.
- .HTMLenv is no longer stored in the global environment:
it should never have been accessed directly in the first place.
- fix() is no longer replaced during HTMLStart()/HTMLStop() sessions.
- Remove obsolete handling of 'date' class from package survival.
- Remove obsolete support for old format of objects from the rpart package
Upstream changes:
Version 1.0.8 2010/08/09
- path.packages instead of .path.package (later is defunct).
- change in lm.phylog to prevent (incorrect) note about no visible binding
for global variable \xe2\x80\x98sim.counter\xe2\x80\x99 in a call to subset.
Update LICENSE
Upstream changes:
CHANGES IN highr VERSION 0.5
MAJOR CHANGES
o the minimal required R version is 3.0.2 now
CHANGES IN highr VERSION 0.4
BUG FIXES
o hi_andre() may fail to find highlight under OS X (thanks, Christopher
Gandrud, #2)
MINOR CHANGES
o :: and ::: are recognized as operators, and they will be syntax highlighted
in the same way as other operators like +, -, *, and /, etc (thanks, Qiang Li)
Upstream changes:
0.9156 Thu Oct 15 13:29:38 BST 2015
* Handle dists that have numerics in last part of distname
* Compartmentalise build dirs like CPANpm does
Upstream changes:
version 2.54 at 2015-12-21 22:51:30 +0000
-----------------------------------------
Change: 523b71a323f9efc9a83bae49f2dbb3f1c6cd0616
Author: Chris 'BinGOs' Williams <chris@bingosnet.co.uk>
Date : 2015-12-21 22:51:30 +0000
Updated for v5.23.6
-----------------------------------------
version 2.52 at 2015-12-13 19:59:21 +0000
-----------------------------------------
Change: 8ee1a9ae4bf5faf9551985aee78321c5f5a19575
Author: Chris 'BinGOs' Williams <chris@bingosnet.co.uk>
Date : 2015-12-13 19:59:21 +0000
Updated for v5.22.1
-----------------------------------------
version 2.50 at 2015-12-08 23:47:08 +0000
-----------------------------------------
Change: b8c37b6987a43a74b9394dace2eb2ec0d9362064
Author: Chris 'BinGOs' Williams <chris@bingosnet.co.uk>
Date : 2015-12-08 23:47:08 +0000
Updated for v5.22.1-RC4
-----------------------------------------
version 2.48 at 2015-12-03 09:30:50 +0000
-----------------------------------------
Change: 044eb575c7d997c930c19f723a8d342a9dd97e31
Author: Chris 'BinGOs' Williams <chris@bingosnet.co.uk>
Date : 2015-12-03 09:30:50 +0000
Updated for v5.22.1-RC3
-----------------------------------------
version 2.46 at 2015-11-20 18:34:53 +0000
-----------------------------------------
Change: 713b83cfe8d84e4fbc52d0d796e1f1da36b4c734
Author: Chris 'BinGOs' Williams <chris@bingosnet.co.uk>
Date : 2015-11-20 18:34:53 +0000
Updated for v5.23.5
-----------------------------------------
version 2.44 at 2015-11-15 15:42:16 +0000
-----------------------------------------
Change: e19096d340cdc65e8e7814fa6775e050b442a80e
Author: Chris 'BinGOs' Williams <chris@bingosnet.co.uk>
Date : 2015-11-15 15:42:16 +0000
Updated for v5.22.1-RC2
-----------------------------------------
version 2.42 at 2015-10-31 18:12:27 +0000
-----------------------------------------
Change: f5c1059fd0f0408f401857068b28094081106017
Author: Chris 'BinGOs' Williams <chris@bingosnet.co.uk>
Date : 2015-10-31 18:12:27 +0000
Updated for v5.22.1-RC1
-----------------------------------------
version 2.40 at 2015-10-21 00:49:39 +0000
-----------------------------------------
Change: 957b558a8a86ac78a3b52d582b918b4a23b88cf5
Author: Chris 'BinGOs' Williams <chris@bingosnet.co.uk>
Date : 2015-10-21 01:49:39 +0000
Update for v5.23.4
-----------------------------------------
version 2.38 at 2015-09-21 09:39:57 +0000
-----------------------------------------
Change: 6a5b210888b113b7b4752aa75bb1930445bcffc2
Author: Chris 'BinGOs' Williams <chris@bingosnet.co.uk>
Date : 2015-09-21 10:39:57 +0000
Updated for v5.23.3
-----------------------------------------
version 2.36 at 2015-09-12 18:39:17 +0000
-----------------------------------------
Change: 66e5f64ce74335e49c15a17a1b12c62490d6c782
Author: Chris 'BinGOs' Williams <chris@bingosnet.co.uk>
Date : 2015-09-12 19:39:17 +0000
Updated for v5.20.3
Changelog:
IMP Help 2 release 2.8.2
=========================
- Complete translation for Brazilian Portuguese
- Many improvements for existing translations
- Bugfixes:
* Bug: 696034 - Exporting transparency docs use "Save" instead of "Export"
* Bug: 724056 - typo reverses meaning...
* Bug: 719859 - File#Export menu labels have been changed
* Bug: 719971 - Grammatical error: "addressing one of the most often received complain"
* Bug: 720479 - Apply save/export concepts on using/web.xml
* Bug: 720209 - Typo in web filters - GIMP manual
* Bug: 719876 - languageVocab.xml missing in 2.8.1 release
* Bug: 719748 - Grammatical error: "GIMP 2.8 is an another important release"
contributions from: João S. O. Bueno, Daniel Mustieles, Marco Ciampa,
Rafael Ferreira, Enrico Nicoletto, Julien Hardelin, Dimitris Spingos,
Sven Claussner, kolbjoern, Róman Joost, Piotr Drąg, SimaMoto,RyōTa,
Benjamin Kerensa, Bogdan Petcu, Christian Kirbach, Konfrare Albert,
Mariana Santos, Nils Philippsen, Willer Gomes Júnior
Changelog:
Fixed: Fix for startup crash for users of a third party antivirus tool (Bug 1235537)
Fixed: Multi-user GNU/Linux download folders can be created (Bug 1233434)
Changed: Re-enable SHA-1 certificates (Bug 1236975)
Upstream changes:
0.165000 2015-12-17 09:19:13+01:00 Europe/Amsterdam
[ BUG FIXES ]
* Revert session_name change, as this would invalidate all existing
changes. We will need to rethink this change.
(Stefan @racke Hornburg, Sawyer X)
0.164000 2015-12-16 23:42:24+01:00 Europe/Amsterdam
[ DOCUMENTATION ]
* Update core team members and contributors list. (Russell Jenkins)
* GH #1066: Fix typo in Cookbook. (gertvanoss)
* Correct typo. It's "query_parameters", not "request_parameters".
Thanks to mst for letting me know and making sure I fix it!
(Sawyer X)
[ BUG FIXES ]
* GH #1040: Forward with a post body no longer tries to re-read body
filehandle. (Bas Bloemsaat)
* GH #1042: Add Diggest::SHA as explicit prequisite for installs on
perl < v5.9.3. (Russell Jenkins)
* GH #1071, #1070: HTML escape the message in the default error page.
(Peter Mottram)
* GH #1062, #1063: Command line interface didn't support
"-s SKELETON_DIRECTORY" in any order.
(Nuno Carvalho)
* GH #1052, #1053: Always call before_serializer hook when serializer
is set.
(Mickey Nasriachi)
* GH #1034: Correctly use different session cookie name for Dancer2.
(Jason A. Crome)
* GH #1060: Remove trailing slashes when providing skeleton
directory.
(Gabor Szabo)
[ ENHANCEMENTS ]
* Use Plack 1.0035 to make sure you only have HTTP::Headers::Fast
in the Plack::Request object internally.
* GH #951#1037: Dancer2::Template::TemplateToolkit no longer sets TT2
INCLUDE_PATH directive, allowing `views` setting to be non-absolute
paths. (Russell Jenkins)
* GH #1032#1043: Add .dancer file to new app scaffolding.
(Jason A. Crome)
* GH #1045: Small cleanups to Request class. (Russell Jenkins)
* GH #1033: strict && warnings in Dancer2::CLI. (Mohammad S Anwar)
* GH #1052, #1053: Allow before_serializer hook to change the content
using @_.
(Mickey Nasriachi)
* GH #1060: Ignore .git directory when using an external skeleton
directory.
(Gabor Szabo)
* GH #1060: Support more asset file extensions. (Gabor Szabo)
* GH #1072: Add request->is_options(). (Theo van Hoesel)
new .tar.gz for each download. each new .tar.gz has a new gzip
timestamp, so the gz is different each download (the tar itself is
the same). this makes it impossible to match the checksum in distinfo,
so we pull it from a static file on MASTER_SITE_BACKUP instead,
as suggested by Thomas Klausner.
LibreOffice is the free power-packed Open Source personal productivity
suite for Windows, Macintosh and Linux, that gives you six feature-rich
applications for all your document production and data processing
needs: Writer, Calc, Impress, Draw, Math and Base.
This package tracks libreoffice-5.x branch of official Linux binary.
