[Buildroot] [git commit] chrony: bump version

[Buildroot] [git commit] chrony: bump version

[Peter Korsgaard]

commit: http://git.buildroot.net/buildroot/commit/?id=21a85fd02a093a13675209bc82fd7e69462ecfc6
branch: http://git.buildroot.net/buildroot/commit/?id=refs/heads/master

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
---
 package/chrony/chrony.mk |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/package/chrony/chrony.mk b/package/chrony/chrony.mk
index afe0fc8..59e5bfc 100644
--- a/package/chrony/chrony.mk
+++ b/package/chrony/chrony.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-CHRONY_VERSION = 1.29.1
+CHRONY_VERSION = 1.30
 CHRONY_SITE = http://download.tuxfamily.org/chrony
 CHRONY_LICENSE = GPLv2
 CHRONY_LICENSE_FILES = COPYING

[Buildroot] [git commit] chrony: bump version

[Peter Korsgaard]

commit: https://git.buildroot.net/buildroot/commit/?id=dc208df5b9a11c288826e605ae14da383eaeddbd
branch: https://git.buildroot.net/buildroot/commit/?id=refs/heads/master

From the release notes:

Enhancements
------------
* Add support for NTP and command response rate limiting
* Add support for dropping root privileges on Mac OS X, FreeBSD, Solaris
* Add require and trust options for source selection
* Enable logchange by default (1 second threshold)
* Set RTC on Mac OS X with rtcsync directive
* Allow binding to NTP port after dropping root privileges on NetBSD
* Drop CAP_NET_BIND_SERVICE capability on Linux when NTP port is disabled
* Resolve names in separate process when seccomp filter is enabled
* Replace old records in client log when memory limit is reached
* Don't reveal local time and synchronisation state in client packets
* Don't keep client sockets open for longer than necessary
* Ignore poll in KoD RATE packets as ntpd doesn't always set it correctly
* Warn when using keys shorter than 80 bits
* Add keygen command to generate random keys easily
* Add serverstats command to report NTP and command packet statistics

Bug fixes
---------
* Fix clock correction after making step on Mac OS X
* Fix building on Solaris

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
---
 package/chrony/chrony.hash | 6 +++---
 package/chrony/chrony.mk   | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/package/chrony/chrony.hash b/package/chrony/chrony.hash
index fb8a655..f39d316 100644
--- a/package/chrony/chrony.hash
+++ b/package/chrony/chrony.hash
@@ -1,3 +1,3 @@
-# From http://listengine.tuxfamily.org/chrony.tuxfamily.org/chrony-announce/2016/01/msg00000.html
-md5  ce46990540aab3670d093311ee43fe17         chrony-2.2.1.tar.gz
-sha1 290b761478dc90d4921c98b7030ead07c49f2afd chrony-2.2.1.tar.gz
+# From https://listengine.tuxfamily.org/chrony.tuxfamily.org/chrony-announce/2016/02/msg00001.html
+md5  db6d46afea66f75dcc362f44623c1af4         chrony-2.3.tar.gz
+sha1 c5e2aac4e4ad904bf73663ed63964bec91482a8a chrony-2.3.tar.gz
diff --git a/package/chrony/chrony.mk b/package/chrony/chrony.mk
index 59faa10..6416b83 100644
--- a/package/chrony/chrony.mk
+++ b/package/chrony/chrony.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-CHRONY_VERSION = 2.2.1
+CHRONY_VERSION = 2.3
 CHRONY_SITE = http://download.tuxfamily.org/chrony
 CHRONY_LICENSE = GPLv2
 CHRONY_LICENSE_FILES = COPYING

[Buildroot] [git commit] chrony: bump version

[Peter Korsgaard]

commit: http://git.buildroot.net/buildroot/commit/?id=08b1c665171727cae439c440f4502a2424891bdf
branch: http://git.buildroot.net/buildroot/commit/?id=refs/heads/master

And add hash file.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
---
 package/chrony/chrony.hash |    3 +++
 package/chrony/chrony.mk   |    2 +-
 2 files changed, 4 insertions(+), 1 deletions(-)

diff --git a/package/chrony/chrony.hash b/package/chrony/chrony.hash
new file mode 100644
index 0000000..ba7f95e
--- /dev/null
+++ b/package/chrony/chrony.hash
@@ -0,0 +1,3 @@
+# From http://listengine.tuxfamily.org/chrony.tuxfamily.org/chrony-announce/2014/09/msg00000.html
+md5	04ab702fc81150db06809562a9aaed92  chrony-1.31.tar.gz
+sha1	71bb46cad2f15760192795e60efdf23069973908  chrony-1.31.tar.gz
diff --git a/package/chrony/chrony.mk b/package/chrony/chrony.mk
index 7baf417..de80b52 100644
--- a/package/chrony/chrony.mk
+++ b/package/chrony/chrony.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-CHRONY_VERSION = 1.30
+CHRONY_VERSION = 1.31
 CHRONY_SITE = http://download.tuxfamily.org/chrony
 CHRONY_LICENSE = GPLv2
 CHRONY_LICENSE_FILES = COPYING

[Buildroot] [git commit] chrony: bump version

[Peter Korsgaard]

commit: http://git.buildroot.net/buildroot/commit/?id=f68c4ab87205467c1a2468fb28f065b20eedd5c1
branch: http://git.buildroot.net/buildroot/commit/?id=refs/heads/master

Fixes CVE-2014-0021: Amplification in chrony control protocol

In the chrony control protocol some replies are significantly larger than
their requests, which allows an attacker to use it in an amplification
attack.  With hosts allowed by cmdallow (only localhost by default) the
maximum amplification factor is 9.2.  Hosts that are not allowed receive a
small reply with error status, which allows amplification of up to 1.5.

To fix the problem, the protocol has been modified to require padding in the
request packet, so replies are never larger than their requests.  Also,
chronyd no longer sends replies with error status to hosts that are not
allowed by cmdallow.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
---
 package/chrony/chrony.mk |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/package/chrony/chrony.mk b/package/chrony/chrony.mk
index eeb42d8..edb5c24 100644
--- a/package/chrony/chrony.mk
+++ b/package/chrony/chrony.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-CHRONY_VERSION = 1.29
+CHRONY_VERSION = 1.29.1
 CHRONY_SITE = http://download.tuxfamily.org/chrony/
 CHRONY_LICENSE = GPLv2
 CHRONY_LICENSE_FILES = COPYING