[pkgsrc/trunk]: pkgsrc/net/ntp4 SECURITY: Update ntpd to 4.2.8p1.

[bsiegert <bsiegert%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/289db6871295
branches:  trunk
changeset: 648872:289db6871295
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Sat Mar 21 20:49:28 2015 +0000

description:
SECURITY: Update ntpd to 4.2.8p1.

* [Sec 2671] vallen in extension fields are not validated.
* [Sec 2672] On some OSes ::1 can be spoofed, bypassing source IP ACLs.

diffstat:

 net/ntp4/Makefile                     |    7 +-
 net/ntp4/PLIST                        |  936 +++++++++++++++++-----------------
 net/ntp4/distinfo                     |    9 +-
 net/ntp4/patches/patch-ntpd_ntp__io.c |  204 -------
 4 files changed, 475 insertions(+), 681 deletions(-)

diffs (truncated from 1200 to 300 lines):

diff -r 9ac064edcea5 -r 289db6871295 net/ntp4/Makefile
--- a/net/ntp4/Makefile Sat Mar 21 20:42:48 2015 +0000
+++ b/net/ntp4/Makefile Sat Mar 21 20:49:28 2015 +0000
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.83 2015/02/28 23:44:56 joerg Exp $
+# $NetBSD: Makefile,v 1.84 2015/03/21 20:49:28 bsiegert Exp $
 #
 
-DISTNAME=      ntp-4.2.8
+DISTNAME=      ntp-4.2.8p1
 PKGNAME=       ${DISTNAME:S/-dev-/-/}
-PKGREVISION=   1
 CATEGORIES=    net time
 MASTER_SITES=  http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2/
 
@@ -23,7 +22,7 @@
 
 OVERRIDE_DIRDEPTH=     4
 
-DOCDIR=                ${DESTDIR}${PREFIX}/share/doc/ntp4
+DOCDIR=                ${DESTDIR}${PREFIX}/share/doc/ntp
 EXAMPLESDIR=   ${DESTDIR}${PREFIX}/share/examples/ntp4
 ALL_NTP_DOCS=  ${DOCDIR} ${EXAMPLESDIR}
 
diff -r 9ac064edcea5 -r 289db6871295 net/ntp4/PLIST
--- a/net/ntp4/PLIST    Sat Mar 21 20:42:48 2015 +0000
+++ b/net/ntp4/PLIST    Sat Mar 21 20:49:28 2015 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.16 2014/12/20 09:45:46 taca Exp $
+@comment $NetBSD: PLIST,v 1.17 2015/03/21 20:49:28 bsiegert Exp $
 bin/sntp
 man/man1/sntp.1
 man/man5/ntp.conf.5
@@ -21,473 +21,473 @@
 sbin/ntptrace
 ${PLIST.tickadj}sbin/tickadj
 ${PLIST.timetrim}sbin/timetrim
-share/doc/ntp4/access.html
-share/doc/ntp4/accopt.html
-share/doc/ntp4/assoc.html
-share/doc/ntp4/audio.html
-share/doc/ntp4/authentic.html
-share/doc/ntp4/authopt.html
-share/doc/ntp4/autokey.html
-share/doc/ntp4/bugs.html
-share/doc/ntp4/build.html
-share/doc/ntp4/clock.html
-share/doc/ntp4/clockopt.html
-share/doc/ntp4/cluster.html
-share/doc/ntp4/comdex.html
-share/doc/ntp4/config.html
-share/doc/ntp4/confopt.html
-share/doc/ntp4/copyright.html
-share/doc/ntp4/debug.html
-share/doc/ntp4/decode.html
-share/doc/ntp4/discipline.html
-share/doc/ntp4/discover.html
-share/doc/ntp4/drivers/driver1.html
-share/doc/ntp4/drivers/driver10.html
-share/doc/ntp4/drivers/driver11.html
-share/doc/ntp4/drivers/driver12.html
-share/doc/ntp4/drivers/driver16.html
-share/doc/ntp4/drivers/driver18.html
-share/doc/ntp4/drivers/driver19.html
-share/doc/ntp4/drivers/driver20.html
-share/doc/ntp4/drivers/driver22.html
-share/doc/ntp4/drivers/driver26.html
-share/doc/ntp4/drivers/driver27.html
-share/doc/ntp4/drivers/driver28.html
-share/doc/ntp4/drivers/driver29.html
-share/doc/ntp4/drivers/driver3.html
-share/doc/ntp4/drivers/driver30.html
-share/doc/ntp4/drivers/driver31.html
-share/doc/ntp4/drivers/driver32.html
-share/doc/ntp4/drivers/driver33.html
-share/doc/ntp4/drivers/driver34.html
-share/doc/ntp4/drivers/driver35.html
-share/doc/ntp4/drivers/driver36.html
-share/doc/ntp4/drivers/driver37.html
-share/doc/ntp4/drivers/driver38.html
-share/doc/ntp4/drivers/driver39.html
-share/doc/ntp4/drivers/driver4.html
-share/doc/ntp4/drivers/driver40.html
-share/doc/ntp4/drivers/driver42.html
-share/doc/ntp4/drivers/driver43.html
-share/doc/ntp4/drivers/driver44.html
-share/doc/ntp4/drivers/driver45.html
-share/doc/ntp4/drivers/driver46.html
-share/doc/ntp4/drivers/driver5.html
-share/doc/ntp4/drivers/driver6.html
-share/doc/ntp4/drivers/driver7.html
-share/doc/ntp4/drivers/driver8.html
-share/doc/ntp4/drivers/driver9.html
-share/doc/ntp4/drivers/icons/home.gif
-share/doc/ntp4/drivers/icons/mail2.gif
-share/doc/ntp4/drivers/mx4200data.html
-share/doc/ntp4/drivers/oncore-shmem.html
-share/doc/ntp4/drivers/scripts/footer.txt
-share/doc/ntp4/drivers/scripts/style.css
-share/doc/ntp4/drivers/tf582_4.html
-share/doc/ntp4/extern.html
-share/doc/ntp4/filter.html
-share/doc/ntp4/hints.html
-share/doc/ntp4/hints/a-ux
-share/doc/ntp4/hints/aix
-share/doc/ntp4/hints/bsdi
-share/doc/ntp4/hints/changes
-share/doc/ntp4/hints/decosf1
-share/doc/ntp4/hints/decosf2
-share/doc/ntp4/hints/freebsd
-share/doc/ntp4/hints/hpux
-share/doc/ntp4/hints/linux
-share/doc/ntp4/hints/mpeix
-share/doc/ntp4/hints/notes-xntp-v3
-share/doc/ntp4/hints/parse
-share/doc/ntp4/hints/refclocks
-share/doc/ntp4/hints/rs6000
-share/doc/ntp4/hints/sco.html
-share/doc/ntp4/hints/sgi
-share/doc/ntp4/hints/solaris-dosynctodr.html
-share/doc/ntp4/hints/solaris.html
-share/doc/ntp4/hints/solaris.xtra.4023118
-share/doc/ntp4/hints/solaris.xtra.4095849
-share/doc/ntp4/hints/solaris.xtra.S99ntpd
-share/doc/ntp4/hints/solaris.xtra.patchfreq
-share/doc/ntp4/hints/sun4
-share/doc/ntp4/hints/svr4-dell
-share/doc/ntp4/hints/svr4_package
-share/doc/ntp4/hints/todo
-share/doc/ntp4/hints/vxworks.html
-share/doc/ntp4/hints/winnt.html
-share/doc/ntp4/history.html
-share/doc/ntp4/howto.html
-share/doc/ntp4/html/access.html
-share/doc/ntp4/html/accopt.html
-share/doc/ntp4/html/assoc.html
-share/doc/ntp4/html/audio.html
-share/doc/ntp4/html/authentic.html
-share/doc/ntp4/html/authopt.html
-share/doc/ntp4/html/autokey.html
-share/doc/ntp4/html/bugs.html
-share/doc/ntp4/html/build.html
-share/doc/ntp4/html/clock.html
-share/doc/ntp4/html/clockopt.html
-share/doc/ntp4/html/cluster.html
-share/doc/ntp4/html/comdex.html
-share/doc/ntp4/html/config.html
-share/doc/ntp4/html/confopt.html
-share/doc/ntp4/html/copyright.html
-share/doc/ntp4/html/debug.html
-share/doc/ntp4/html/decode.html
-share/doc/ntp4/html/discipline.html
-share/doc/ntp4/html/discover.html
-share/doc/ntp4/html/drivers/driver1.html
-share/doc/ntp4/html/drivers/driver10.html
-share/doc/ntp4/html/drivers/driver11.html
-share/doc/ntp4/html/drivers/driver12.html
-share/doc/ntp4/html/drivers/driver16.html
-share/doc/ntp4/html/drivers/driver18.html
-share/doc/ntp4/html/drivers/driver19.html
-share/doc/ntp4/html/drivers/driver20.html
-share/doc/ntp4/html/drivers/driver22.html
-share/doc/ntp4/html/drivers/driver26.html
-share/doc/ntp4/html/drivers/driver27.html
-share/doc/ntp4/html/drivers/driver28.html
-share/doc/ntp4/html/drivers/driver29.html
-share/doc/ntp4/html/drivers/driver3.html
-share/doc/ntp4/html/drivers/driver30.html
-share/doc/ntp4/html/drivers/driver31.html
-share/doc/ntp4/html/drivers/driver32.html
-share/doc/ntp4/html/drivers/driver33.html
-share/doc/ntp4/html/drivers/driver34.html
-share/doc/ntp4/html/drivers/driver35.html
-share/doc/ntp4/html/drivers/driver36.html
-share/doc/ntp4/html/drivers/driver37.html
-share/doc/ntp4/html/drivers/driver38.html
-share/doc/ntp4/html/drivers/driver39.html
-share/doc/ntp4/html/drivers/driver4.html
-share/doc/ntp4/html/drivers/driver40.html
-share/doc/ntp4/html/drivers/driver42.html
-share/doc/ntp4/html/drivers/driver43.html
-share/doc/ntp4/html/drivers/driver44.html
-share/doc/ntp4/html/drivers/driver45.html
-share/doc/ntp4/html/drivers/driver46.html
-share/doc/ntp4/html/drivers/driver5.html
-share/doc/ntp4/html/drivers/driver6.html
-share/doc/ntp4/html/drivers/driver7.html
-share/doc/ntp4/html/drivers/driver8.html
-share/doc/ntp4/html/drivers/driver9.html
-share/doc/ntp4/html/drivers/icons/home.gif
-share/doc/ntp4/html/drivers/icons/mail2.gif
-share/doc/ntp4/html/drivers/mx4200data.html
-share/doc/ntp4/html/drivers/oncore-shmem.html
-share/doc/ntp4/html/drivers/scripts/footer.txt
-share/doc/ntp4/html/drivers/scripts/style.css
-share/doc/ntp4/html/drivers/tf582_4.html
-share/doc/ntp4/html/extern.html
-share/doc/ntp4/html/filter.html
-share/doc/ntp4/html/hints.html
-share/doc/ntp4/html/hints/a-ux
-share/doc/ntp4/html/hints/aix
-share/doc/ntp4/html/hints/bsdi
-share/doc/ntp4/html/hints/changes
-share/doc/ntp4/html/hints/decosf1
-share/doc/ntp4/html/hints/decosf2
-share/doc/ntp4/html/hints/freebsd
-share/doc/ntp4/html/hints/hpux
-share/doc/ntp4/html/hints/linux
-share/doc/ntp4/html/hints/mpeix
-share/doc/ntp4/html/hints/notes-xntp-v3
-share/doc/ntp4/html/hints/parse
-share/doc/ntp4/html/hints/refclocks
-share/doc/ntp4/html/hints/rs6000
-share/doc/ntp4/html/hints/sco.html
-share/doc/ntp4/html/hints/sgi
-share/doc/ntp4/html/hints/solaris-dosynctodr.html
-share/doc/ntp4/html/hints/solaris.html
-share/doc/ntp4/html/hints/solaris.xtra.4023118
-share/doc/ntp4/html/hints/solaris.xtra.4095849
-share/doc/ntp4/html/hints/solaris.xtra.S99ntpd
-share/doc/ntp4/html/hints/solaris.xtra.patchfreq
-share/doc/ntp4/html/hints/sun4
-share/doc/ntp4/html/hints/svr4-dell
-share/doc/ntp4/html/hints/svr4_package
-share/doc/ntp4/html/hints/todo
-share/doc/ntp4/html/hints/vxworks.html
-share/doc/ntp4/html/hints/winnt.html
-share/doc/ntp4/html/history.html
-share/doc/ntp4/html/howto.html
-share/doc/ntp4/html/huffpuff.html
-share/doc/ntp4/html/icons/home.gif
-share/doc/ntp4/html/icons/mail2.gif
-share/doc/ntp4/html/icons/sitemap.png
-share/doc/ntp4/html/index.html
-share/doc/ntp4/html/kern.html
-share/doc/ntp4/html/kernpps.html
-share/doc/ntp4/html/keygen.html
-share/doc/ntp4/html/leap.html
-share/doc/ntp4/html/miscopt.html
-share/doc/ntp4/html/monopt.html
-share/doc/ntp4/html/msyslog.html
-share/doc/ntp4/html/ntp-wait.html
-share/doc/ntp4/html/ntp_conf.html
-share/doc/ntp4/html/ntpd.html
-share/doc/ntp4/html/ntpdate.html
-share/doc/ntp4/html/ntpdc.html
-share/doc/ntp4/html/ntpdsim.html
-share/doc/ntp4/html/ntpdsim_new.html
-share/doc/ntp4/html/ntpq.html
-share/doc/ntp4/html/ntptime.html
-share/doc/ntp4/html/ntptrace.html
-share/doc/ntp4/html/orphan.html
-share/doc/ntp4/html/parsedata.html
-share/doc/ntp4/html/parsenew.html
-share/doc/ntp4/html/pic/9400n.jpg
-share/doc/ntp4/html/pic/alice11.gif
-share/doc/ntp4/html/pic/alice13.gif
-share/doc/ntp4/html/pic/alice15.gif
-share/doc/ntp4/html/pic/alice23.gif
-share/doc/ntp4/html/pic/alice31.gif
-share/doc/ntp4/html/pic/alice32.gif
-share/doc/ntp4/html/pic/alice35.gif
-share/doc/ntp4/html/pic/alice38.gif
-share/doc/ntp4/html/pic/alice44.gif
-share/doc/ntp4/html/pic/alice47.gif
-share/doc/ntp4/html/pic/alice51.gif
-share/doc/ntp4/html/pic/alice61.gif
-share/doc/ntp4/html/pic/barnstable.gif
-share/doc/ntp4/html/pic/beaver.gif
-share/doc/ntp4/html/pic/boom3.gif
-share/doc/ntp4/html/pic/boom3a.gif
-share/doc/ntp4/html/pic/boom4.gif
-share/doc/ntp4/html/pic/broad.gif
-share/doc/ntp4/html/pic/bustardfly.gif
-share/doc/ntp4/html/pic/c51.jpg
-share/doc/ntp4/html/pic/description.jpg
-share/doc/ntp4/html/pic/discipline.gif
-share/doc/ntp4/html/pic/dogsnake.gif
-share/doc/ntp4/html/pic/driver29.gif
-share/doc/ntp4/html/pic/driver43_1.gif
-share/doc/ntp4/html/pic/driver43_2.jpg
-share/doc/ntp4/html/pic/fg6021.gif
-share/doc/ntp4/html/pic/fg6039.jpg
-share/doc/ntp4/html/pic/fig_3_1.gif
-share/doc/ntp4/html/pic/flatheads.gif
-share/doc/ntp4/html/pic/flt1.gif
-share/doc/ntp4/html/pic/flt2.gif
-share/doc/ntp4/html/pic/flt3.gif
-share/doc/ntp4/html/pic/flt4.gif
-share/doc/ntp4/html/pic/flt5.gif
-share/doc/ntp4/html/pic/flt6.gif
-share/doc/ntp4/html/pic/flt7.gif
-share/doc/ntp4/html/pic/flt8.gif
-share/doc/ntp4/html/pic/flt9.gif
-share/doc/ntp4/html/pic/freq1211.gif
-share/doc/ntp4/html/pic/gadget.jpg
-share/doc/ntp4/html/pic/gps167.jpg
-share/doc/ntp4/html/pic/group.gif
-share/doc/ntp4/html/pic/hornraba.gif
-share/doc/ntp4/html/pic/igclock.gif