Changelog for ntp-debugsource-4.2.8p8-25.1.x86_64.rpm :

* Sun Jun 05 2016 maxAATTsuse.com- Keep the parent process alive until the daemon has finished initialisation, to make sure that the PID file exists when the parent returns (ntp-daemonize.patch).
* Thu Jun 02 2016 maxAATTsuse.com- Update to 4.2.8p8 (bsc#982056):
* CVE-2016-4953, bsc#982065: Bad authentication demobilizes ephemeral associations.
* CVE-2016-4954, bsc#982066: Processing spoofed server packets.
* CVE-2016-4955, bsc#982067: Autokey association reset.
* CVE-2016-4956, bsc#982068: Broadcast interleave.
* CVE-2016-4957, bsc#982064: CRYPTO_NAK crash.- Change the process name of the forking DNS worker process to avoid the impression that ntpd is started twice (bsc#979302).- Don\'t ignore SIGCHILD because it breaks wait() (boo#981422).- ntp-wait does not accept fractional seconds, so use 1 instead of 0.2 in ntp-wait.service (boo#979981).- Separate the creation of ntp.keys and key #1 in it to avoid problems when upgrading installations that have the file, but no key #1, which is needed e.g. by \"rcntp addserver\".
* Thu Apr 28 2016 maxAATTsuse.com- Update to 4.2.8p7 (bsc#977446):
* CVE-2016-1547, bsc#977459: Validate crypto-NAKs, AKA: CRYPTO-NAK DoS.
* CVE-2016-1548, bsc#977461: Interleave-pivot
* CVE-2016-1549, bsc#977451: Sybil vulnerability: ephemeral association attack.
* CVE-2016-1550, bsc#977464: Improve NTP security against buffer comparison timing attacks.
* CVE-2016-1551, bsc#977450: Refclock impersonation vulnerability
* CVE-2016-2516, bsc#977452: Duplicate IPs on unconfig directives will cause an assertion botch in ntpd.
* CVE-2016-2517, bsc#977455: remote configuration trustedkey/ requestkey/controlkey values are not properly validated.
* CVE-2016-2518, bsc#977457: Crafted addpeer with hmode > 7 causes array wraparound with MATCH_ASSOC.
* CVE-2016-2519, bsc#977458: ctl_getitem() return value not always checked.
* integrate ntp-fork.patch
* Improve the fixes for: CVE-2015-7704, CVE-2015-7705, CVE-2015-7974- Restrict the parser in the startup script to the first occurrance of \"keys\" and \"controlkey\" in ntp.conf (boo#957226).
* Fri Apr 15 2016 maxAATTsuse.com- Enable compile-time support for MS-SNTP (--enable-ntp-signd). This replaces the w32 patches in 4.2.4 that added the authreg directive. (fate#320758).- Fix ntp-sntp-dst.patch (bsc#975496).- Call /usr/sbin/sntp with full path to synchronize in start-ntpd. When run as cron job, /usr/sbin/ is not in the path, which caused the synchronization to fail. (boo#962318)- Speedup ntpq (boo#782060, ntp-speedup-ntpq.patch).- Sync service files with openSUSE Factory.
* Wed Mar 30 2016 maxAATTsuse.com- Fix the TZ offset output of sntp during DST (bsc#951559).
* Fri Mar 18 2016 maxAATTsuse.com- Add ntp-fork.patch and build with threads disabled to allow name resolution even when running chrooted.
* Fri Jan 22 2016 maxAATTsuse.com- Update to 4.2.8p6:
* CVE-2015-8158, bsc#962966: Potential Infinite Loop in ntpq.
* CVE-2015-8138, bsc#963002: origin: Zero Origin Timestamp Bypass.
* CVE-2015-7979, bsc#962784: Off-path Denial of Service (DoS) attack on authenticated broadcast mode.
* CVE-2015-7978, bsc#963000: Stack exhaustion in recursive traversal of restriction list.
* CVE-2015-7977, bsc#962970: reslist NULL pointer dereference.
* CVE-2015-7976, bsc#962802: ntpq saveconfig command allows dangerous characters in filenames.
* CVE-2015-7975, bsc#962988: nextvar() missing length check.
* CVE-2015-7974, bsc#962960: Skeleton Key: Missing key check allows impersonation between authenticated peers.
* CVE-2015-7973, bsc#962995: Deja Vu: Replay attack on authenticated broadcast mode.
* CVE-2015-8140: ntpq vulnerable to replay attacks.
* CVE-2015-8139: Origin Leak: ntpq and ntpdc, disclose origin.
* CVE-2015-5300, bsc#951629: Small-step/Big-step.- Add /var/db/ntp-kod (bsc#916617).- Add ntp-ENOBUFS.patch to limit a warning that might happen quite a lot on loaded systems (bsc#956773).
* Fri Nov 20 2015 dmuellerAATTsuse.com- add ntp.bug2965.diff (bsc#954982)
* fixes regression in 4.2.8p4 update
* Thu Oct 29 2015 maxAATTsuse.com- Update to 4.2.8p4 to fix several security issues (bsc#951608):
* CVE-2015-7871: NAK to the Future: Symmetric association authentication bypass via crypto-NAK
* CVE-2015-7855: decodenetnum() will ASSERT botch instead of returning FAIL on some bogus values
* CVE-2015-7854: Password Length Memory Corruption Vulnerability
* CVE-2015-7853: Invalid length data provided by a custom refclock driver could cause a buffer overflow
* CVE-2015-7852 ntpq atoascii() Memory Corruption Vulnerability
* CVE-2015-7851 saveconfig Directory Traversal Vulnerability
* CVE-2015-7850 remote config logfile-keyfile
* CVE-2015-7849 trusted key use-after-free
* CVE-2015-7848 mode 7 loop counter underrun
* CVE-2015-7701 Slow memory leak in CRYPTO_ASSOC
* CVE-2015-7703 configuration directives \"pidfile\" and \"driftfile\" should only be allowed locally
* CVE-2015-7704, CVE-2015-7705 Clients that receive a KoD should validate the origin timestamp field
* CVE-2015-7691, CVE-2015-7692, CVE-2015-7702 Incomplete autokey data packet length checks
* obsoletes ntp-memlock.patch.- Add a controlkey line to /etc/ntp.conf if one does not already exist to allow runtime configuuration via ntpq.
* Tue Sep 22 2015 maxAATTsuse.com- Temporarily disable memlock to avoid problems due to high memory usage during name resolution (bsc#946386, ntp-memlock.patch).
* Fri Sep 18 2015 maxAATTsuse.com- Use SHA1 instead of MD5 for symmetric keys (bsc#905885).- Improve runtime configuration:
* Read keytype from ntp.conf
* Don\'t write ntp keys to syslog.- Fix legacy action scripts to pass on command line arguments.
* Wed Sep 09 2015 maxAATTsuse.com- Remove ntp.1.gz, it wasn\'t installed anymore.- Remove ntp-4.2.7-rh-manpages.tar.gz and only keep ntptime.8.gz. The rest is partially irrelevant, partially redundant and potentially outdated (bsc#942587).- Remove \"kod\" from the restrict line in ntp.conf (bsc#944300).
* Fri Sep 04 2015 maxAATTsuse.com- Use ntpq instead of deprecated ntpdc in start-ntpd (bnc#936327).- Add a controlkey to ntp.conf to make the above work.- Don\'t let \"keysdir\" lines in ntp.conf trigger the \"keys\" parser.- Disable mode 7 (ntpdc) again, now that we don\'t use it anymore.
* Thu Jul 23 2015 maxAATTsuse.com- Add \"addserver\" as a new legacy action.- Fix the comment regarding addserver in ntp.conf (bnc#910063).
* Mon Jul 13 2015 maxAATTsuse.com- Update to version 4.2.8p3 which incorporates all security fixes and most other patches we have so far (fate#319040). More information on: http://archive.ntp.org/ntp4/ChangeLog-stable- Disable chroot by default (bnc#926510).- Enable ntpdc for backwards compatibility (bnc#920238).
* Mon Apr 27 2015 maxAATTsuse.com- Security fix: ntp-keygen may generate non-random symmetric keys on big-endian systems (bsc#928321, CVE-2015-3405).
* Tue Apr 07 2015 meissnerAATTsuse.com- security update bsc#924202 / VU#374268 - ntp-CVE-2015-1798.patch: CVE-2015-1798: NTP Bug 2779: ntpd accepts unauthenticated packets with symmetric key crypto. - ntp-CVE-2015-1799.patch: CVE-2015-1799: NTP Bug 2781: Authentication doesn\'t protect symmetric associations against DoS attacks.
* Fri Mar 13 2015 maxAATTsuse.com- Fix slew mode for leap seconds (bnc#918342).
* Mon Feb 09 2015 maxAATTsuse.com- NTP Bug 2672, CVE-2014-9298: ::1 can be spoofed on some OSes, so ACLs based on IPv6 ::1 addresses can be bypassed.
* Tue Feb 03 2015 maxAATTsuse.com- bnc#911792: Security backport from ntp-4.2.8p1:- NTP Bug 2671, CVE-2014-9297 - vallen is not validated in several places in ntp_crypto.c, leading to potential info leak.
* Fri Jan 16 2015 maxAATTsuse.com- bnc#910764:
* CVE-2014-9293: Weak default key in config_auth()
* CVE-2014-9294: ntp-keygen uses weak random number generator seed when generating MD5 keys.
* Fri Dec 19 2014 maxAATTsuse.com- bnc#910764: VU#852879 ntp security fixes
* A potential remote code execution problem was found inside ntpd. The functions crypto_recv() (when using autokey authentication), ctl_putdata(), and configure() where updated to avoid buffer overflows that could be exploited. (CVE-2014-9295)
* Furthermore a problem inside the ntpd error handling was found that is missing a return statement. This could also lead to a potentially attack vector. (CVE-2014-9296)
* Tue Nov 18 2014 meissnerAATTsuse.com- ntp-fips-reenablemd5.patch: Reenable use of legacy MD5 in fips mode. bnc#898596
* Fri Sep 26 2014 maxAATTsuse.com- Re-enable the ntptimeset legacy init script action (bnc#893406).
* Thu Jun 12 2014 maxAATTsuse.com- Forward-port some bugs that got fixed for SLE11 (bnc#831311):
* bnc#817893
* bnc#482349
* Mon May 05 2014 seife+obsAATTb1-systems.com- fix start-ntpd again: service is now called ntpd, not ntp
* Tue Apr 29 2014 maxAATTsuse.com- Remove /var/run/ntp from the package: http://lists.opensuse.org/opensuse-packaging/2014-04/msg00046.html- Fix Provides/Obsoletes of package aliases.- Add /usr/sbin/rc
* links.- Stay enabled across sysv to systemd migrations (bnc#875490).
* Sat Apr 19 2014 seife+obsAATTb1-systems.com- fix \"start-ntp addserver\": start-ntp has no \"status\" method
* Thu Apr 03 2014 wernerAATTsuse.de- Remove empty insserv call whic hhad only caused an error message- Correct 50-ntp.list to include ntpd.service
* Mon Mar 31 2014 wernerAATTsuse.de- Restart nptd if failed or aborted (FATE#315133)
* Thu Mar 27 2014 wernerAATTsuse.de- Service unit files are no executables
* Thu Mar 27 2014 wernerAATTsuse.de- Use correct ntp-wait script from source tar ball (bnc#864193)- Implement new ntp-wait.service to provide time-sync.target- A few cleanups on the new start script of ntpd
* Thu Mar 27 2014 kukukAATTsuse.de- Add missing systemd %pre macro
* Tue Mar 04 2014 varkolyAATTsuse.com- Add systemd configuration and start script
* Fri Feb 14 2014 maxAATTsuse.com- bnc#863815, ntp-sntp-recverr.patch: Get sntp to recognize socket errors, so that it skips unreachable destinations immediately instead of trying to reach them for more than five minutes before finally timing out. This patch will probably be obsoleted by the next major upgrade, because the current development release takes a different approach to get a quick answer from one of the specified servers.
* Mon Jan 20 2014 maxAATTsuse.com- CVE-2013-5211, bnc#857195: restrict query, configuration, modification access from world by default. Avoids that ntp can be used as a DDoS amplifier.
* Tue Oct 22 2013 varkolyAATTsuse.com- bnc#838458 ntp start script does not update /var/lib/ntp/etc/localtime file if /etc/localtime is symlink
* Mon Aug 19 2013 crrodriguezAATTopensuse.org- Build with -DOPENSSL_LOAD_CONF , ntp must respect and use the system\'s openssl configuration.
* Sat Mar 09 2013 seife+obsAATTb1-systems.com- fix build with automake-1.13
* Thu Feb 28 2013 varkolyAATTsuse.com- bnc#797351 - ntpd \"listen-on\" directive support is missing/broken; unable to restrict/secure listening IPs
* Tue Feb 26 2013 varkolyAATTsuse.com- bnc#793012 - NTP default to \'sync time on startup\' conflicts with NetworkManager
* Fri Feb 22 2013 mhruseckyAATTsuse.cz- disable Undisciplined Local Clock in default conf file (bnc#784760)
* Fri Jan 18 2013 bwiedemannAATTsuse.com- Speedup ntpq (bnc#782060) +ntp-4.2.6p2-ntpq-speedup-782060.patch
* Thu Jan 17 2013 varkolyAATTsuse.com- bnc#450196 - ext3 - recovering journal on / on first boot on new kernel/fresh system updates- bnc#774553 - ntp initscript: hwclock: With --noadjfile, you must specify either --utc or --localtime
* Fri Dec 14 2012 lnusselAATTsuse.de- logrotate is not strictly required for operation of ntp so change it to Suggested. That way the minimal installation doesn\'t draw in cron and postfix.
* Thu Aug 02 2012 rmilasanAATTsuse.com- Created the correct link to /run/ntp
* Thu Jul 19 2012 crrodriguezAATTopensuse.org- Openssl wanted but not properly detected, fixed.
* Wed Jul 04 2012 cfarrellAATTsuse.com- license update: (MIT and BSD-3-Clause and BSD-4-Clause) and GPL-2.0 Properly categorise licenses and sync with Fedora declaration
* Mon Apr 23 2012 varkolyAATTsuse.com- bnc#758253 - L3: ntp fails if host has more than 1024 IP-addresses ntp#1180 - ntpd won\'t start with more than 1000 interfaces
* Mon Jan 09 2012 lmuelleAATTsuse.com- Remove superfluous remove of acconfig.h while build.- BuildRequire autoconf to avoid implicit dependency for post-11.4 systems.- Remove call to suse_update_config macro for post-11.4 systems.
* Mon Jan 09 2012 lmuelleAATTsuse.com- BuildRequire fdupes for post-10.1 systems.- Do not call autoreconf for pre-10.2 systems.
* Mon Jan 09 2012 lmuelleAATTsuse.de- Update to version 4.2.6p5. - ntpd
* Updated \"nic\" and \"interface\" IPv6 address handling to prevent mismatches with localhost [::1] and wildcard [::] which resulted from using the address/prefix format (e.g. fe80::/64)
* Fix orphan mode stratum incorrectly counting to infinity
* Orphan parent selection metric updated to includes missing ntohl()
* Non-printable stratum 16 refid no longer sent to ntp
* Duplicate ephemeral associations suppressed for broadcastclient and multicastclient without broadcastdelay
* Exclude undetermined sys_refid from use in loopback TEST12
* Exclude MODE_SERVER responses from KoD rate limiting
* Include root delay in clock_update() sys_rootdisp calculations
* get_systime() updated to exclude sys_residual offset (which only affected bits \"below\" sys_tick, the precision threshold)
* sys.peer jitter weighting corrected in sys_jitter calculation - ntpq
* -n option extended to include the billboard \"server\" column
* IPv6 addresses in the local column truncated to prevent overruns- Update to version 4.2.6p4. - Build system
* Fix checking for struct rtattr
* Upgrade required version of autogen and libopts for building from our source code repository - ntpd
* Back-ported several fixes for Coverity warnings from ntp-dev
* Fix a rare boundary condition in UNLINK_EXPR_SLIST()
* Allow \"logconfig =allall\" configuration directive
* Bind tentative IPv6 addresses on Linux
* Correct WWVB/Spectracom driver to timestamp CR instead of LF
* Improved tally bit handling to prevent incorrect ntpq peer status reports
* Exclude the Undisciplined Local Clock and ACTS drivers from the initial candidate list unless they are designated a \"prefer peer\"
* Prevent the consideration of Undisciplined Local Clock or ACTS drivers for selection during the \'tos orphanwait\' period·
* Prefer an Orphan Mode Parent over the Undisciplined Local Clock or ACTS drivers
* Improved support of the Parse Refclock trusttime flag in Meinberg mode
* Back-port utility routines from ntp-dev: mprintf(), emalloc_zero()
* Code cleanup in libntpq - ntpdc
* Fix timerstats reporting - ntpdate
* Reduce time required to set clock
* Allow a timeout greater than 2 seconds - sntp
* Backward incompatible command-line option change: - l/--filelog changed -l/--logfile (to be consistent with ntpd) - Documentation
* Update html2man. Fix some tags in the .html files
* Distribute ntp-wait.html
* Mon Jan 09 2012 lmuelleAATTsuse.de- Remove superfluously used NTPD_PID_NOPREFIX from init script.- Refresh patches to apply with no offset.
* Thu Nov 24 2011 varkolyAATTsuse.com- bnc#730374 - Hardware Clock does not get synchronized
* Wed Nov 23 2011 cooloAATTsuse.com- add libtool as buildrequire to avoid implicit dependency
* Thu Oct 27 2011 varkolyAATTsuse.com- bnc#656509 - don\'t use --bind on /var/lib/ntp/proc
* Fri Aug 26 2011 varkolyAATTsuse.com- bnc#699724 - ntpdate was replaced with a dud script
* Wed Jun 01 2011 varkolyAATTsuse.de- The default timeout for sntp is to long. This can stop booting- bnc#689070 - ntp post install script always removes /etc/sysconfig/ntp- bnc#688529 - (ntp) ntpq and ntpdc command history broken- bnc#695598 - \"Started sntp\" in /var/log/messages
* Sun May 01 2011 hpjAATTurpla.net- fix \"rcntp ntptimeset\"
* never try to syncronize with local clocks (127.127.
*), which led to sntp blocking until timeout elapsed (and probably blocking boot sequence for ~5 min per device..)- fix DOS line breaks in some doc files
* Tue Apr 26 2011 varkolyAATTnovell.com- fix/improve init script
* related to bugzilla 688132
* \"rcntp ntptimeset\" could not parse servers from ntp.conf when IP proto was specified (server [-4|-6] hostname)
* \"rcntp ntptimeset\" is now using ip proto parameter (-4|-6) if it\'s set in NTPD_OPTIONS and skip servers where the opposite proto is defined
* Fri Apr 01 2011 hpjAATTurpla.net- replace remove-ntpdate.diff with sed script- don\'t effectively zap existing /etc/sysconfig/ntp- while at it, simplify /etc/sysconfig/ntp update- improve NTP_PARSE_DEVICE documentation for /etc/sysconfig/ntp- refresh all patches with offsets and fuzz
* Thu Feb 03 2011 mvidnerAATTsuse.cz- updated the sntp syntax also in our ntpdate script (bnc#658255#c2)
* Tue Jan 04 2011 adrianAATTsuse.de- update to version 4.2.6p3
* main feature, it really ! updates the time, old version was miscalculating the offset based on t21 and t34
* Tue Jan 04 2011 adrianAATTsuse.de- require $network startup before ntp. This is not enforced via $network_fs when no nfs and cifs is enabled
* Tue Dec 14 2010 ismailAATTnamtrac.org- bnc#657194 - compile with --enable-ntp-signd
* Mon Dec 13 2010 varkolyAATTnovell.com- bnc#658799 - ntp init script makes /proc readonly, blocking login
* Wed Dec 08 2010 varkolyAATTnovell.com- bnc#658255 - ntpd is not working and sntp complains about unknown options
* Tue Nov 30 2010 varkolyAATTnovell.com- update to 4.2.6p2
* Major code clean up. 1. The protostats statistics files have been very useful in exposing little twitches and turns when something hiccups, like a broken PPS signal. Most of what used to be syslog messages are now repackaged as protostats messages with optional syslog as well. 2. Close inspection of the clock discipline behavior at long poll intervals (36 h) showed it not doing as well as it should. 3. Autokey. The enhanced error checking was becoming a major pain. A way was found to toss out gobs of ugly fat code and replace the function with a much simpler and more comprehensive scheme. 4. The interface code for the kernel PPS signal was not in sync with the kernel code itself. Some error checks were duplicated and some ineffective. 5. The flake restrict bit turned out to be really interesting, especially with symmtric modes and of those especially those using Autokey.
* Documentation updates- New old feature: sync time on startup. If not needed NTPD_FORCE_SYNC_ON_STARTUP must be set to no in /etc/sysconfig/ntp
* Tue Sep 28 2010 ajAATTsuse.de- Handle /var/run as tmpfs
* Fri Apr 23 2010 varkolyAATTnovell.com- Set time by starting ntp via ntptimeset
* Fri Apr 09 2010 varkolyAATTnovell.com- rcntp timeset now gets the time via sntp inmediately
* Sun Mar 21 2010 novellbmwAATTlsmod.de- fix read-only mount of proc in chroot
* Thu Mar 18 2010 varkolyAATTnovell.com- bnc#574885 - XEN is using many network interfaces and stopping and restarting XEN instances results in ntpd error \"Cannot find existing interface for address ...\".
* Wed Jan 06 2010 jengelhAATTmedozas.de- enable parallel build
* Wed Dec 09 2009 varkolyAATTsuse.de- update to ntp-4.2.4p8 to fix bnc#550316 - VUL-0: ntp DoS- bnc#557716 - NTP PLL does not converge based on https://support.ntp.org/bugs/show_bug.cgi?id=1219
* Sat Nov 28 2009 seifeAATTopensuse.org- Also fix multiple mount on multiple \"rcntp start\" invocations
* Mon Aug 31 2009 tiwaiAATTsuse.de- Really fix the multiple mount bug in ntp init script (bnc#517222)
* Mon Jul 20 2009 varkolyAATTsuse.de- bnc#517222 – Minor patch for ntp init-script
* Tue Jul 14 2009 ajAATTsuse.de- Add ntp-4.2.4p7-autoconf.patch to fix build failure.
* Fri Jul 10 2009 varkolyAATTsuse.de- bnc#515629 - NM_ONLINE_TIMEOUT does not work with parallel boot- bnc#521044 - ntp init script: /etc/init.d/ntp: line 70: return: can only `return\' from a function or sourced script
* Fri Jun 19 2009 varkolyAATTsuse.de- bnc#506908 - ntptrace doesn\'t work as non root user- update to 4.2.4p7:
* [Sec 1151] Remote exploit if autokey is enabled - CVE-2009-1252.
* [Bug 1187] Update the copyright date.
* [Bug 1191] ntpd fails on Win2000 - \"Address already in use\" after fix for [Sec 1149].
* ntp.isc.org -> ntp.org cleanup.
* [Bug 1178] Use prior FORCE_DNSRETRY behavior as needed at runtime, add configure --enable-ignore-dns-errors to be even more stubborn
* [Bug 784] Make --enable-linuxcaps the default when available
* [Bug 1179] error messages for -u/--user and -i lacking droproot
* Updated JJY reference clock driver from Takao Abe
* [Bug 1071] Log a message and exit before trying to use FD_SET with a descriptor larger than FD_SETSIZE, which will corrupt memory
* On corruption of the iface list head in add_interface, log and exit
* [Bug 1172] 4.2.4p7-RC{3,4} fail to build on linux.
* flock-build script unportable \'set -m\' use removed
* [Bug 1167] use gcc -Winit-self only if it is understood
* [Bug 787] Bug fixes for 64-bit time_t on Windows
* [Bug 813] Conditional naming of Event
* [Bug 1147] System errors should be logged to msyslog()
* [Bug 1155] Fix compile problem on Windows with VS2005
* [Bug 1156] lock_thread_to_processor() should be declared in header
* [Bug 1157] quiet OpenSSL warnings, clean up configure.ac
* [Bug 1158] support for aix6.1
* [Bug 1160] MacOS X is like BSD regarding F_SETOWN
* [Sec 1144] limited buffer overflow in ntpq. CVE-2009-0159
* [Sec 1149] use SO_EXCLUSIVEADDRUSE on Windows
* [Bug 1131] UDP sockets should not use SIGPOLL on Solaris.
* build system email address cleanup
* [Bug 774] parsesolaris.c does not compile under the new Solaris
* [Bug 873] Windows serial refclock proper TTY line discipline emulation
* [Bug 1014] Enable building with VC9 (in Visual Studio 2008, Visual C++ 2008, or SDK)
* [Bug 1117] Deferred interface binding under Windows works only correctly if FORCE_DNSRETRY is defined
* [BUG 1124] Lock QueryPerformanceCounter() client threads to same CPU
* DPRINTF macro made safer, always evaluates to a statement and will not misassociate an else which follows the macro.
* Wed May 06 2009 varkolyAATTsuse.de- bnc#468685 - ntpd causes 16 wakeups per second
* Wed Apr 29 2009 varkolyAATTsuse.de- bnc#492304 - ntpd man page refers to package xntp-doc (which does not exist)- bnc#495496 – ntp misses prereq: /sbin/chkconfig