Changelog for chrony-debugsource-3.2-lp152.13.9.1.i586.rpm :

* Sun May 23 2021 Reinhard Max - bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode, but needed for calculating refids from IPv6 addresses as part of the NTP protocol (rfc5905). As this is a non-cryptographic use of MD5 we can use our own implementation without violating FIPS rules: chrony-refid-internal-md5.patch .
* Thu Apr 08 2021 Reinhard Max - boo#1162964, bsc#1183783, clknetsim-glibc-2.31.patch: Fix build with glibc-2.31- bsc#1184400, chrony-pidfile.patch: Use /run instead of /var/run for PIDFile in chronyd.service.
* Tue Sep 29 2020 Reinhard Max - Integrate three upstream patches to fix an infinite loop in chronyc (bsc#1171806).
* chrony-select-timeout.patch
* chrony-gettimeofday.patch
* chrony-urandom.patch
* Wed May 27 2020 Reinhard Max - Use iburst in the default pool statements to speed up initial synchronisation (bsc#1172113).
* Fri Mar 27 2020 Reinhard Max - Read runtime servers from /var/run/netconfig/chrony.servers to fix bsc#1099272 and bsc#1161119.- Move chrony-helper to /usr/lib/chrony/helper, because there should be no executables in /usr/share.- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that preconfigure chrony to use NTP servers from the respective pools for SUSE and openSUSE (bsc#1156884, SLE-11424).- Add chrony-pool-empty to still allow installing chrony without preconfigured servers.
* Wed Jan 08 2020 Reinhard Max - bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix \"make check\" builds made after 2019-12-20. Existing installations do not need to be updated as the bug only affects the test, but not chrony itself.
* Wed Mar 20 2019 Reinhard Max - Fix ordering and dependencies of chronyd.service, so that it is started after name resolution is up (bsc#1129914).- Add chrony-service-ordering.patch
* Fri Dec 14 2018 Martin Pluskal - Make sure to generate correct sysconfig file (boo#1117147)
* Wed Apr 18 2018 mpostAATTsuse.com- Added /etc/chrony.d/ directory to the package (bsc#1083597) Modifed default chrony.conf to add \"include /etc/chrony.d/
*\"
* Mon Mar 26 2018 kukukAATTsuse.de- Use %license instead of %doc [bsc#1082318]
* Wed Mar 14 2018 kukukAATTsuse.de- Fix name of fillup template (was never installed before)- Fix Requires for fillup, it\'s used in post, not pre.
* Fri Feb 09 2018 mpluskalAATTsuse.com- Enable pps support
* Thu Nov 23 2017 rbrownAATTsuse.com- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)
* Thu Oct 26 2017 mpluskalAATTsuse.com- Cleanup spec file:
* Drop pre systemd support
* Run spec-cleaner
* Tue Oct 24 2017 mpostAATTsuse.com- Modified the spec file to comment out the pool statement in chrony.conf if _not_ building for openSUSE. (bsc#1063704).
* Thu Sep 28 2017 mrueckertAATTsuse.de- refresh patches to apply cleanly again - chrony-config.patch - chrony-fix-open.patch
* Wed Sep 20 2017 mpostAATTsuse.com- Upgraded to version 3.2: Enhancements
* Improve stability with NTP sources and reference clocks
* Improve stability with hardware timestamping
* Improve support for NTP interleaved modes
* Control frequency of system clock on macOS 10.13 and later
* Set TAI-UTC offset of system clock with leapsectz directive
* Minimise data in client requests to improve privacy
* Allow transmit-only hardware timestamping
* Add support for new timestamping options introduced in Linux 4.13
* Add root delay, root dispersion and maximum error to tracking log
* Add mindelay and asymmetry options to server/peer/pool directive
* Add extpps option to PHC refclock to timestamp external PPS signal
* Add pps option to refclock directive to treat any refclock as PPS
* Add width option to refclock directive to filter wrong pulse edges
* Add rxfilter option to hwtimestamp directive
* Add -x option to disable control of system clock
* Add -l option to log to specified file instead of syslog
* Allow multiple command-line options to be specified together
* Allow starting without root privileges with -Q option
* Update seccomp filter for new glibc versions
* Dump history on exit by default with dumpdir directive
* Use hardening compiler options by default Bug fixes
* Don\'t drop PHC samples with low-resolution system clock
* Ignore outliers in PHC tracking, RTC tracking, manual input
* Increase polling interval when peer is not responding
* Exit with error message when include directive fails
* Don\'t allow slash after hostname in allow/deny directive/command
* Try to connect to all addresses in chronyc before giving up- Upgraded clknetsim to version 71dbbc5.- Reworked chrony-fix-open.patch to fit the new version
* Tue Jan 31 2017 mpostAATTsuse.com- Upgraded to version 3.1: - Enhancements - Add support for precise cross timestamping of PHC on Linux - Add minpoll, precision, nocrossts options to hwtimestamp directive - Add rawmeasurements option to log directive and modify measurements option to log only valid measurements from synchronised sources - Allow sub-second polling interval with NTP sources - Bug fixes - Fix time smoothing in interleaved mode- Upgraded clknetsim to version ce89a1b.- Reworked the following patches to fit the new versions - chrony-config.patch - chrony-service-helper.patch - chrony-fix-open.patch
* Mon Jan 16 2017 mpostAATTsuse.com- Upgraded to version 3.0: - Enhancements - Add support for software and hardware timestamping on Linux - Add support for client/server and symmetric interleaved modes - Add support for MS-SNTP authentication in Samba - Add support for truncated MACs in NTPv4 packets - Estimate and correct for asymmetric network jitter - Increase default minsamples and polltarget to improve stability with very low jitter - Add maxjitter directive to limit source selection by jitter - Add offset option to server/pool/peer directive - Add maxlockage option to refclock directive - Add -t option to chronyd to exit after specified time - Add partial protection against replay attacks on symmetric mode - Don\'t reset polling interval when switching sources to online state - Allow rate limiting with very short intervals - Improve maximum server throughput on Linux and NetBSD - Remove dump files after start - Add tab-completion to chronyc with libedit/readline - Add ntpdata command to print details about NTP measurements - Allow all source options to be set in add server/peer command - Indicate truncated addresses/hostnames in chronyc output - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses - Bug fixes - Fix crash with disabled asynchronous name resolving- Upgraded clknetsim to version 6bb6519.
* Tue Nov 29 2016 mpostAATTsuse.com- Upgraded to version 2.4.1: - Bug fixes - Fix processing of kernel timestamps on non-Linux systems - Fix crash with smoothtime directive - Fix validation of refclock sample times - Fix parsing of refclock directive
* Wed Jun 08 2016 mrueckertAATTsuse.de- update to 2.4: - Enhancements - Add orphan option to local directive for orphan mode compatible with ntpd - Add distance option to local directive to set activation threshold (1 second by default) - Add maxdrift directive to set maximum allowed drift of system clock - Try to replace NTP sources exceeding maximum distance - Randomise source replacement to avoid getting stuck with bad sources - Randomise selection of sources from pools on start - Ignore reference timestamp as ntpd doesn\'t always set it correctly - Modify tracking report to use same values as seen by NTP clients - Add -c option to chronyc to write reports in CSV format - Provide detailed manual pages - Bug fixes - Fix SOCK refclock to work correctly when not specified as last refclock - Fix initstepslew and -q/-Q options to accept time from own NTP clients - Fix authentication with keys using 512-bit hash functions - Fix crash on exit when multiple signals are received - Fix conversion of very small floating-point numbers in command packets - Removed features - Drop documentation in Texinfo format- update clknetsim to a5949fe for fixing a testsuite failure: - add IP_PKTINFO socket option - accept environment variables in make - fix building with FORTIFY_SOURCE - fix compiler warning - support multiple SHM refclocks - fix recv functions with new glibc headers- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim update- drop patches: - chrony-include-termios.patch - make-105-ntpauth-more-reliable.patch- drop buildrequires for texinfo and pre requires on the install info packages- no longer use make install-docs: it only installed 0 byte html files.
* Wed Apr 13 2016 mpluskalAATTsuse.com- Provide ntp-daemon (bsc#973981)
* Mon Apr 11 2016 meissnerAATTsuse.com- chrony-fix-open.patch: make sure _open and _close are initialized in open()/close() override, as libfreebl3 also calls from the the ELF constructor. FATE#319508- enable mozilla-nss
* Fri Apr 08 2016 mpluskalAATTsuse.com- Use correct license- Drop hardcoded dependency on libseccomp, it is detected during build
* Fri Apr 08 2016 mpluskalAATTsuse.com- Undo reference to chrony-dnssrvAATT.service in %pre, %preun, %post, and %postun as it would lead to error.- Change conditions for libseccom, we can use any version on SLE-12 x86_64
* Tue Apr 05 2016 mpostAATTsuse.com- Removed %if for distributions that aren\'t building chrony.- Renamed chrony-2.2_logrotate.patch to chrony-logrotate.patch since the patch is not particularly version-dependent.- Added clknetsim for \"make check\" processing.- Added Buildrequires for gcc-c++ and timezone for building clknetsim and running \"make check\".- Changed Buildrequires and Requires to specify the minimum level of libseccomp needed to build on s390x and ppc64le.- Removed \"-Recommends: timedatex\" since I couldn\'t find any instance of it anywhere in the build service.- Modified the description to use some of the information from the chrony web site.- Added chrony-include-termios.patch so that it will build on ppc64le.- Added make-105-ntpauth-more-reliable.patch so that \"make check\" will not report a non-failure as a failure.- Added --without-nss to ./configure to avoid \"interruption code 0x2003B in chronyd\" errors.- Changed the symbolic links for rcchronyd and rcchronyd-wait to point to the actual location of the service command, not the symlink in /sbin.- Added reference to chrony-dnssrvAATT.service in %pre, %preun, %post, and %postun.
* Mon Mar 28 2016 mpluskalAATTsuse.com- Cleanup spec file with spec-cleaner- Prepare for submission to Factory (see fate#319508)
* Thu Feb 18 2016 mrueckertAATTsuse.de- update to 2.3 - Enhancements - Add support for NTP and command response rate limiting - Add support for dropping root privileges on Mac OS X, FreeBSD, Solaris - Add require and trust options for source selection - Enable logchange by default (1 second threshold) - Set RTC on Mac OS X with rtcsync directive - Allow binding to NTP port after dropping root privileges on NetBSD - Drop CAP_NET_BIND_SERVICE capability on Linux when NTP port is disabled - Resolve names in separate process when seccomp filter is enabled - Replace old records in client log when memory limit is reached - Don\'t reveal local time and synchronisation state in client packets - Don\'t keep client sockets open for longer than necessary - Ignore poll in KoD RATE packets as ntpd doesn\'t always set it correctly - Warn when using keys shorter than 80 bits - Add keygen command to generate random keys easily - Add serverstats command to report NTP and command packet statistics - Bug fixes - Fix clock correction after making step on Mac OS X - Fix building on Solaris- refreshed patches to apply cleanly again: chrony-2.2_logrotate.patch chrony-config.patch chrony-service-helper.patch
* Fri Jan 29 2016 mrueckertAATTsuse.de- update to 2.2.1 Restrict authentication of NTP server/peer to specified key (CVE-2016-1567)
* Thu Nov 26 2015 mrueckertAATTsuse.de- silence groupadd/useradd call and drop the shell from the user.
* Thu Nov 26 2015 mrueckertAATTsuse.de- update to 2.2 see /usr/share/doc/packages/chrony/NEWS- sync with fedora spec and add systemd support- refreshed chrony-config.patch to apply cleanly again- added chrony-2.2_logrotate.patch: add missing su option as we no longer have the daemon run as root.- added chrony-service-helper.patch: imported from fedora with a changed path for moving from libexecdir to datadir- only use syscall filters on 12.3 and newer- move helper from libexecdir to datadir