applications/system

sntp - Standard Simple Network Time Protocol program

Website: http://www.ntp.org
License: (MIT and BSD and BSD with advertising) and GPLv2
Vendor: Fedora Project
Description:
sntp can be used as a SNTP client to query a NTP or SNTP server and either
display the time or set the local system's time (given suitable privilege).
It can be run as an interactive command or in a cron job.

Packages

sntp-4.2.6p5-44.fc24.x86_64 [83 KiB] Changelog by Miroslav Lichvar (2017-03-23):
- fix crash with invalid unpeer command (CVE-2017-6463)
- fix buffer overflow in datum refclock driver (CVE-2017-6462)
- fix potential buffer overflow in mx4200 refclock driver (CVE-2017-6451)
- fix potential buffer overflows in formatting of ntpq responses
  (CVE-2017-6458)
- fix potential crash with invalid server command (CVE-2017-6464)
- fix CVE-2016-7429 patch to work correctly on multicast client
- fix typos in ntpd man page (#1434755)
sntp-4.2.6p5-43.fc24.x86_64 [82 KiB] Changelog by Miroslav Lichvar (2016-11-22):
- don't limit rate of packets from sources (CVE-2016-7426)
- don't change interface from received packets (CVE-2016-7429)
- fix calculation of root distance again (CVE-2016-7433)
- require authentication for trap commands (CVE-2016-9310)
- fix crash when reporting peer event to trappers (CVE-2016-9311)
sntp-4.2.6p5-41.fc24.x86_64 [83 KiB] Changelog by Miroslav Lichvar (2016-06-02):
- don't disclose sensitive timestamps in ntpq/ntpdc responses (CVE-2015-8139)
- drop spoofed packets sooner (CVE-2016-4954)
- don't allow spoofed packets to reset associations using autokey
  (CVE-2016-4955)
- check authentication before switching broadcast interleaved mode
  (CVE-2016-4956)

Listing created by Repoview-0.6.6-6.fc21