26035b39d0
NTF's NTP Project is releasing ntp-4.2.8p10, which addresses: * 6 MEDIUM severity vulnerabilities (1 is about the Windows PPSAPI DLL) * 5 LOW severity vulnerabilities (2 are in the Windows Installer) * 4 Informational-level vulnerabilities * 15 other non-security fixes and improvements All of the security issues in this release are listed in VU#633849. ntp-4.2.8p10 was released on 21 March 2017. * Sec 3389 / CVE-2017-6464 / VU#325339: NTP-01-016 NTP: Denial of Service via Malformed Config (Pentest report 01.2017) - Reported by Cure53. * Sec 3388 / CVE-2017-6462 / VU#325339: NTP-01-014 NTP: Buffer Overflow in DPTS Clock (Pentest report 01.2017) - Reported by Cure53. * Sec 3387 / CVE-2017-6463 / VU#325339: NTP-01-012 NTP: Authenticated DoS via Malicious Config Option (Pentest report 01.2017) - Reported by Cure53. * Sec 3386: NTP-01-011 NTP: ntpq_stripquotes() returns incorrect Value (Pentest report 01.2017) - Reported by Cure53. * Sec 3385: NTP-01-010 NTP: ereallocarray()/eallocarray() underused (Pentest report 01.2017) - Reported by Cure53. * Sec 3384 / CVE-2017-6455 / VU#325339: NTP-01-009 NTP: Windows: Privileged execution of User Library code (Pentest report 01.2017) - Reported by Cure53. * Sec 3383 / CVE-2017-6452 / VU#325339: NTP-01-008 NTP: Windows Installer: Stack Buffer Overflow from Command Line (Pentest report 01.2017) - Reported by Cure53. * Sec 3382 / CVE-2017-6459 / VU#325339: NTP-01-007 NTP: Windows Installer: Data Structure terminated insufficiently (Pentest report 01.2017) - Reported by Cure53. * Sec 3381: NTP-01-006 NTP: Copious amounts of Unused Code (Pentest report 01.2017) - Reported by Cure53. * Sec 3380: NTP-01-005 NTP: Off-by-one in Oncore GPS Receiver (Pentest report 01.2017) - Reported by Cure53. * Sec 3379 / CVE-2017-6458 / VU#325339: NTP-01-004 NTP: Potential Overflows in ctl_put() functions (Pentest report 01.2017) - Reported by Cure53. * Sec 3378 / CVE-2017-6451 / VU#325339: NTP-01-003 Improper use of snprintf() in mx4200_send() (Pentest report 01.2017) - Reported by Cure53. * Sec 3377 / CVE-2017-6460 / VU#325339: NTP-01-002 Buffer Overflow in ntpq when fetching reslist (Pentest report 01.2017) - Reported by Cure53. * Sec 3376: NTP-01-001 Makefile does not enforce Security Flags (Pentest report 01.2017) - Reported by Cure53. * Sec 3361 / CVE-2016-9042 / VU#325339: 0rigin - Reported by Matthew Van Gundy of Cisco ASIG.
73 lines
2.1 KiB
Makefile
73 lines
2.1 KiB
Makefile
# $NetBSD: Makefile,v 1.98 2017/03/24 03:41:08 taca Exp $
|
|
#
|
|
|
|
DISTNAME= ntp-4.2.8p10
|
|
PKGNAME= ${DISTNAME:S/-dev-/-/}
|
|
CATEGORIES= net time
|
|
MASTER_SITES= http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2/
|
|
|
|
MAINTAINER= pkgsrc-users@NetBSD.org
|
|
HOMEPAGE= http://www.ntp.org/
|
|
COMMENT= Network Time Protocol Version 4
|
|
|
|
CONFLICTS+= openntpd-[0-9]*
|
|
|
|
GNU_CONFIGURE= YES
|
|
USE_LIBTOOL= YES
|
|
USE_TOOLS+= pax perl:run
|
|
|
|
CONFIGURE_ARGS+=--sysconfdir=${PKG_SYSCONFDIR}
|
|
CONFIGURE_ARGS+=--with-locfile=loc/pkgsrc
|
|
CONFIGURE_ENV+= PATH_PERL=${PERL5}
|
|
|
|
OVERRIDE_DIRDEPTH= 4
|
|
|
|
DOCS+= COPYRIGHT ChangeLog NEWS README* TODO
|
|
DOCDIR= share/doc/ntp
|
|
EXAMPLESDIR= share/examples/ntp4
|
|
ALL_NTP_DOCS= ${DESTDIR}${PREFIX}/${DOCDIR} ${DESTDIR}${PREFIX}/${EXAMPLESDIR}
|
|
|
|
INSTALLATION_DIRS= ${DOCDIR} ${EXAMPLESDIR}
|
|
|
|
RCD_SCRIPTS= ntpd ntpdate
|
|
|
|
post-install:
|
|
cd ${WRKSRC} && ${INSTALL_DATA} ${DOCS} ${DESTDIR}${PREFIX}/${DOCDIR}
|
|
cd ${WRKSRC}/conf && pax -rw -pm . ${DESTDIR}${PREFIX}/${EXAMPLESDIR}
|
|
${CHOWN} -R ${SHAREOWN}:${SHAREGRP} ${ALL_NTP_DOCS}
|
|
${FIND} ${ALL_NTP_DOCS} -type d -print | ${XARGS} ${CHMOD} ${PKGDIRMODE}
|
|
${FIND} ${ALL_NTP_DOCS} -type f -print | ${XARGS} ${CHMOD} ${SHAREMODE}
|
|
|
|
.include "../../mk/bsd.prefs.mk"
|
|
.include "options.mk"
|
|
|
|
PLIST_VARS+= ntpsnmpd ntptime tickadj timetrim
|
|
|
|
.if ${OPSYS} == "NetBSD" || ${OPSYS} == "FreeBSD" || ${OPSYS} == "DragonFly" || ${OPSYS} == "Linux" || ${OPSYS} == "SunOS"
|
|
PLIST.ntptime= yes
|
|
PLIST.tickadj= yes
|
|
.elif ${OPSYS} == "IRIX"
|
|
PLIST.timetrim= yes
|
|
.elif ${OPSYS} == "Darwin"
|
|
PLIST.tickadj= yes
|
|
.endif
|
|
|
|
# chroot jail support
|
|
.if ${OPSYS} == "NetBSD"
|
|
CONFIGURE_ARGS+= --enable-clockctl
|
|
.elif ${OPSYS} == "Linux" && exists(/usr/include/sys/capability.h)
|
|
CONFIGURE_ARGS+= --enable-linuxcaps
|
|
.else
|
|
# no chroot/privilege drop supported
|
|
.endif
|
|
|
|
CPPFLAGS.Linux+= -D_GNU_SOURCE # for struct in6_pktinfo
|
|
|
|
.include "../../security/openssl/buildlink3.mk"
|
|
|
|
CONFIGURE_ARGS+= --with-openssl-incdir=${SSLBASE}/include
|
|
CONFIGURE_ARGS+= --with-openssl-libdir=${SSLBASE}/lib
|
|
CONFIGURE_ARGS+= --with-crypto=openssl
|
|
|
|
.include "../../mk/readline.buildlink3.mk"
|
|
.include "../../mk/bsd.pkg.mk"
|