Log message:
Pullup ticket #5040 - requested by taca
net/ntp4: package build fixes

Revisions pulled up:
- net/ntp4/Makefile                                             1.93-1.94
- net/ntp4/PLIST                                                1.22
- net/ntp4/options.mk                                           1.3

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	bsiegert
   Date:		Fri May 13 15:50:13 UTC 2016

   Modified Files:
   	pkgsrc/net/ntp4: Makefile PLIST

   Log message:
   Fix package installation for Darwin, which installs tickadj and ntpsnmpd.

   Not sure what the snmp thing is about; is it picking up a dependency from
   the base system? Why does no other OS build it?

   To generate a diff of this commit:
   cvs rdiff -u -r1.92 -r1.93 pkgsrc/net/ntp4/Makefile
   cvs rdiff -u -r1.21 -r1.22 pkgsrc/net/ntp4/PLIST

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	bsiegert
   Date:		Sat May 14 08:13:49 UTC 2016

   Modified Files:
   	pkgsrc/net/ntp4: Makefile options.mk

   Log message:
   Do SNMP support properly, as a package option, default disabled.

   To generate a diff of this commit:
   cvs rdiff -u -r1.93 -r1.94 pkgsrc/net/ntp4/Makefile
   cvs rdiff -u -r1.2 -r1.3 pkgsrc/net/ntp4/options.mk

Log message:
Pullup ticket #5037 - requested by bsiegert
net/ntp4: security update

Revisions pulled up:
- net/ntp4/Makefile                                             1.95
- net/ntp4/distinfo                                             1.27

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   taca
   Date:           Fri Jun  3 09:45:09 UTC 2016

   Modified Files:
           pkgsrc/net/ntp4: Makefile distinfo

   Log message:
   Update ntp4 package to 4.2.8p8, security fix.

   (4.2.8p8) 2016/06/02 Released by Harlan Stenn <stenn@ntp.org>

   * [Sec 3042] Broadcast Interleave.  HStenn.
   * [Sec 3043] Autokey association reset.  perlinger@ntp.org, =
   stenn@ntp.org
     - validate origin timestamps on bad MACs, too.  stenn@ntp.org
   * [Sec 3044] Spoofed server packets are partially processed.  HStenn.
   * [Sec 3045] Bad authentication demobilizes ephemeral associations. =
   JPerlinger.
   * [Sec 3046] CRYPTO_NAK crash.  stenn@ntp.org
   * [Bug 3038] NTP fails to build in VS2015. perlinger@ntp.org
     - provide build environment
     - 'wint_t' and 'struct timespec' defined by VS2015
     - fixed print()/scanf() format issues
   * [Bug 3052] Add a .gitignore file.  Edmund Wong.
   * [Bug 3054] miscopt.html documents the allan intercept in seconds. =
   SWhite.
   * [Bug 3058] fetch_timestamp() mishandles 64-bit alignment. Brian =
   Utterback,
     JPerlinger, HStenn.
   * Update the NEWS file for 4.2.8p8.  HStenn.
   * Fix typo in ntp-wait and plot_summary.  HStenn.
   * Make sure we have an "author" file for git imports.  HStenn.
   * Update the sntp problem tests for MacOS.  HStenn.

   To generate a diff of this commit:
   cvs rdiff -u -r1.94 -r1.95 pkgsrc/net/ntp4/Makefile
   cvs rdiff -u -r1.26 -r1.27 pkgsrc/net/ntp4/distinfo

Log message:
Pullup ticket #5010 - requested by taca
net/ntp4: security fix

Revisions pulled up:
- net/ntp4/Makefile                                             1.92
- net/ntp4/PLIST                                                1.21
- net/ntp4/distinfo                                             1.26

---
   Module Name:	pkgsrc
   Committed By:	wen
   Date:		Wed Apr 27 15:59:19 UTC 2016

   Modified Files:
   	pkgsrc/net/ntp4: Makefile PLIST distinfo

   Log message:
   Update to 4.2.8p7

   Upstream changes:
   (4.2.8p7) 2016/04/26 Released by Harlan Stenn <stenn@ntp.org>

   * [Sec 2901] KoD packets must have non-zero transmit timestamps.  HStenn.
   * [Sec 2936] Skeleton Key: Any system knowing the trusted key can serve
    time. Include passive servers in this check. HStenn.
   * [Sec 2945] Additional KoD packet checks.  HStenn.
   * [Sec 2978] Interleave can be partially triggered.  HStenn.
   * [Sec 3007] Validate crypto-NAKs.  Danny Mayer.
   * [Sec 3008] Always check the return value of ctl_getitem().
    - initial work by HStenn
    - Additional cleanup of ctl_getitem by perlinger@ntp.org
   * [Sec 3009] Crafted addpeer with hmode > 7 causes OOB error. perlinger@ntp.org
     - added more stringent checks on packet content
   * [Sec 3010] remote configuration trustedkey/requestkey values
    are not properly validated. perlinger@ntp.org
    - sidekick: Ignore keys that have an unsupported MAC algorithm
      but are otherwise well-formed
   * [Sec 3011] Duplicate IPs on unconfig directives will cause an assertion botch
    - graciously accept the same IP multiple times. perlinger@ntp.org
   * [Sec 3020] Refclock impersonation.  HStenn.
   * [Bug 2831]  Segmentation Fault in DNS lookup during startup. perlinger@ntp.org
    - fixed yet another race condition in the threaded resolver code.
   * [Bug 2858] bool support.  Use stdbool.h when available.  HStenn.
   * [Bug 2879] Improve NTP security against timing attacks. perlinger@ntp.org
    - integrated patches by Loganaden Velvidron <logan@ntp.org>
      with some modifications & unit tests
   * [Bug 2952] Symmetric active/passive mode is broken.  HStenn.
   * [Bug 2960] async name resolution fixes for chroot() environments.
    Reinhard Max.
   * [Bug 2994] Systems with HAVE_SIGNALED_IO fail to compile. perlinger@ntp.org
   * [Bug 2995] Fixes to compile on Windows
   * [Bug 2999] out-of-bounds access in 'is_safe_filename()'. perlinger@ntp.org
   * [Bug 3013] Fix for ssl_init.c SHA1 test. perlinger@ntp.org
    - Patch provided by Ch. Weisgerber
   * [Bug 3015] ntpq: config-from-file: "request contains an unprintable \ 
character"
    - A change related to [Bug 2853] forbids trailing white space in
      remote config commands. perlinger@ntp.org
   * [Bug 3019] NTPD stops processing packets after ERROR_HOST_UNREACHABLE
    - report and patch from Aleksandr Kostikov.
    - Overhaul of Windows IO completion port handling. perlinger@ntp.org
   * [Bug 3022] authkeys.c should be refactored. perlinger@ntp.org
    - fixed memory leak in access list (auth[read]keys.c)
    - refactored handling of key access lists (auth[read]keys.c)
    - reduced number of error branches (authreadkeys.c)
   * [Bug 3023] ntpdate cannot correct dates in the future. perlinger@ntp.org
   * [Bug 3030] ntpq needs a general way to specify refid output format.  HStenn.
   * [Bug 3031] ntp broadcastclient unable to synchronize to an server
               when the time of server changed. perlinger@ntp.org
    - Check the initial delay calculation and reject/unpeer the broadcast
      server if the delay exceeds 50ms. Retry again after the next
      broadcast packet.
   * [Bug 3036] autokey trips an INSIST in authistrustedip().  Harlan Stenn.
   * Document ntp.key's optional IP list in authenetic.html.  Harlan Stenn.
   * Update html/xleave.html documentation.  Harlan Stenn.
   * Update ntp.conf documentation.  Harlan Stenn.
   * Fix some Credit: attributions in the NEWS file.  Harlan Stenn.
   * Fix typo in html/monopt.html.  Harlan Stenn.
   * Add README.pullrequests.  Harlan Stenn.
   * Cleanup to include/ntp.h.  Harlan Stenn.

   ---
   (4.2.8p6) 2016/01/20 Released by Harlan Stenn <stenn@ntp.org>

   * [Sec 2935] Deja Vu: Replay attack on authenticated broadcast mode. HStenn.
   * [Sec 2936] Skeleton Key: Any trusted key system can serve time. HStenn.
   * [Sec 2937] ntpq: nextvar() missing length check. perlinger@ntp.org
   * [Sec 2938] ntpq saveconfig command allows dangerous characters
    in filenames. perlinger@ntp.org
   * [Sec 2939] reslist NULL pointer dereference.  perlinger@ntp.org
   * [Sec 2940] Stack exhaustion in recursive traversal of restriction
    list. perlinger@ntp.org
   * [Sec 2942]: Off-path DoS attack on auth broadcast mode.  HStenn.
   * [Sec 2945] Zero Origin Timestamp Bypass. perlinger@ntp.org
   * [Sec 2948] Potential Infinite Loop in ntpq ( and ntpdc) perlinger@ntp.org
   * [Bug 2772] adj_systime overflows tv_usec. perlinger@ntp.org
   * [Bug 2814] msyslog deadlock when signaled. perlinger@ntp.org
    - applied patch by shenpeng11@huawei.com with minor adjustments
   * [Bug 2882] Look at ntp_request.c:list_peers_sum(). perlinger@ntp.org
   * [Bug 2891] Deadlock in deferred DNS lookup framework. perlinger@ntp.org
   * [Bug 2892] Several test cases assume IPv6 capabilities even when
               IPv6 is disabled in the build. perlinger@ntp.org
    - Found this already fixed, but validation led to cleanup actions.
   * [Bug 2905] DNS lookups broken. perlinger@ntp.org
    - added limits to stack consumption, fixed some return code handling
   * [Bug 2971] ntpq bails on ^C: select fails: Interrupted system call
    - changed stacked/nested handling of CTRL-C. perlinger@ntp.org
    - make CTRL-C work for retrieval and printing od MRU list. perlinger@ntp.org
   * [Bug 2980] reduce number of warnings. perlinger@ntp.org
    - integrated several patches from Havard Eidnes (he@uninett.no)
   * [Bug 2985] bogus calculation in authkeys.c perlinger@ntp.org
    - implement 'auth_log2()' using integer bithack instead of float calculation
   * Make leapsec_query debug messages less verbose.  Harlan Stenn.
   * Disable incomplete t-ntp_signd.c test.  Harlan Stenn.