Change log for chrony package in Debian

165 of 65 results
Published in buster-release on 2019-03-15
Published in sid-release on 2019-03-05
chrony (3.4-3) unstable; urgency=medium

  * debian/.gitlab-ci.yml:
    - Check for missing hardening flags.

  * debian/patches/*:
    - Add allow-_llseek-in-seccomp-filter.patch. Needed on various 32-bit
    plateforms to log the {raw}measurements and statistics information when
    the seccomp filter is enabled. Thanks a lot to Francesco Poli (wintermute)
    <email address hidden> for the report. (Closes: #923137)
    - Add allow-waitpid-in-seccomp-filter.patch. Needed to correctly stop
    chronyd on some plateforms when the seccomp filter is enabled.

 -- Vincent Blut <email address hidden>  Mon, 04 Mar 2019 23:32:12 +0100
Superseded in buster-release on 2019-03-15
Superseded in sid-release on 2019-03-05
chrony (3.4-2) unstable; urgency=medium

  * debian/.gitlab-ci.yml:
    - Replace home-made GitLab CI with the standard Salsa pipeline.
    - Allow autopkgtest job to fail. The time-sources-from-dhcp-servers test
    currently fails due to a testbed issue on salsa CI.

  * debian/chrony.default:
    - Enable the system call filter by default.

  * debian/control:
    - Bump standard-version to 4.3.0 (no changes required).
    - Use the new debhelper-compat (= 12) notation and drop d/compat.
    - Add Pre-Depends: ${misc:Pre-Depends}. Debhelper compatibility level 12
    makes use of the “--skip-systemd-native” flag from “invoke-rc.d”. Adding
    Pre-Depends: ${misc:Pre-Depends} to d/control ensure that we have a recent
    enough version of “init-system-helpers”.
    - Suggest networkd-dispatcher.

  * debian/copyright:
    - Add myself as a copyright holder for 2019.

  * debian/links:
    - Now that “networkd-dispatcher” is in the Debian archive, link
    NetworkManager dispatcher script to networkd-dispatcher routable and off
    states. Patch cherry-picked from Ubuntu; thanks to Christian Ehrhardt
    <email address hidden> for working on this.

  * debian/NEWS:
    - Report that a system call filter is now enabled by default and the way
    to disable it if needed.

  * debian/rules:
    - Don’t enable the system call filter on some architectures due to missing
    support in the “libseccomp” and/or the Linux kernel.

  * debian/upstream/:
    - Strip upstream key from extra signatures. Thanks lintian!
    - Remove the Miroslav-Lichvar.txt file as it serves no purpose.

  * debian/usr.sbin.chronyd:
    - Don’t include “tunables/sys”. The etc/apparmor.d/tunables/sys file has
    been deprecated in AppArmor 2.13.1! The @{sys} variable is now defined in
    “tunables/kernelvars” which is included in “tunables/global”.

 -- Vincent Blut <email address hidden>  Wed, 13 Feb 2019 17:08:17 +0100
Superseded in buster-release on 2019-02-24
Superseded in sid-release on 2019-02-14
chrony (3.4-1) unstable; urgency=medium

  * Import upstream version 3.4:
    - Please see /usr/share/doc/chrony/NEWS.gz for the release notes.

  * Merge branch “experimental” into “master”.

  * debian/chrony.service:
    - Conflict with ntpsec.service.

  * debian/copyright:
    - Update copyright years.

  * debian/patches/*:
    - Remove fix-samplefilt-unit-test-to-work-with-low-precision-clock.patch,
    fixed upstream.

 -- Vincent Blut <email address hidden>  Fri, 21 Sep 2018 14:12:03 +0200
Deleted in experimental-release (Reason: None provided.)
chrony (3.4~pre1-2) experimental; urgency=medium

  * debian/patches/*:
    - Cherry-pick upstream patch to fix samplefilt unit test to work with
    low-precision clocks. This should prevent chrony from failing to build
    from source on HPPA and Alpha.

 -- Vincent Blut <email address hidden>  Mon, 10 Sep 2018 18:39:58 +0200
Superseded in experimental-release on 2018-09-11
chrony (3.4~pre1-1) experimental; urgency=medium

  * Import upstream version 3.4-pre1:
    - Please see /usr/share/doc/chrony/NEWS.gz for the release notes.

  * debian/:
    - Add “.gitlab-ci.yml” file to use GitLab Continuous Integration.

  * debian/chrony.if-{post-down,up}:
    - Use the new “onoffline” command to tell chronyd to switch all sources to
    the online or offline status according to the current network configuration.

  * debian/chrony.ppp.ip-{down,up}:
    - As for ifupdown scripts, use the “onoffline” command.

  * debian/control:
    - Bump standard-version to 4.2.1 (no changes required).

  * debian/patches/*:
    - Remove fall-back-to-urandom.patch. Applied in this prerelease.

  * debian/post{inst,rm}:
    - Use “command -v” instead of “which” to enhance portability.

 -- Vincent Blut <email address hidden>  Sun, 02 Sep 2018 19:14:08 +0200
Superseded in buster-release on 2018-09-24
Superseded in sid-release on 2018-09-22
chrony (3.3-3) unstable; urgency=medium

  * debian/:
    - Normalize packaging with “wrap-and-sort -ab”.

  * debian/control:
    - Bump standard-version to 4.2.0:
        ↳ Install upstream release notes as “/usr/share/doc/chrony/NEWS.gz”.
          Installing these as “/usr/share/doc/package/changelog.gz” is now
          deprecated.

  * debian/patches/:
    - Cherry-pick upstream patch to avoid hangs when starting
    chronyd on newer kernels by falling back to urandom.
    Thanks to Gustavo Scalet <email address hidden> for the report and
    the initial patch. (LP: #1787366, Closes: #906276)

  * debian/upstream/metadata:
    - Add DEP12 upstream metadata file.

 -- Vincent Blut <email address hidden>  Sat, 18 Aug 2018 16:23:19 +0200
Superseded in buster-release on 2018-08-21
Superseded in sid-release on 2018-08-19
chrony (3.3-2) unstable; urgency=medium

  * debian/chrony.service:
    - Conflict with ntp.service.

  * debian/control:
    - Bump standard-version to 4.1.4 (no changes required).
    - Switch to the Nettle cryptographic library for hash functions.

  [ Helmut Grohne ]
  * debian/rules:
    - Pass CC to make and set “--host-system” to fix FTCBFS. (Closes: #895852)

  [ Christian Ehrhardt ]
  * debian/usr.sbin.chronyd:
    - Support all paths suggested in the man page.
    (LP: #1771028, Closes: #898614)

 -- Vincent Blut <email address hidden>  Mon, 14 May 2018 21:37:30 +0200
Superseded in buster-release on 2018-05-17
Superseded in sid-release on 2018-05-15
chrony (3.3-1) unstable; urgency=medium

  * Import upstream version 3.3:
    - Please see /usr/share/doc/chrony/changelog.gz for the release notes.

  * Merge branch “experimental” into “master”.

  * debian/copyright:
    - Update copyright year.

  * debian/usr.sbin.chronyd:
    - Allow CAP_NET_ADMIN to support HW timestamping. (LP: #1761327)

 -- Vincent Blut <email address hidden>  Thu, 05 Apr 2018 02:08:31 +0200
Superseded in buster-release on 2018-04-12
Superseded in sid-release on 2018-04-07
chrony (3.2-5) unstable; urgency=medium

  [ Christian Ehrhardt ]
  * debian/usr.sbin.chronyd:
    - Allow write access to RTC, PPS and PTP devices.
    (Closes: #891201, LP: #1751241)

 -- Vincent Blut <email address hidden>  Wed, 28 Feb 2018 17:31:08 +0100
Deleted in experimental-release (Reason: None provided.)
chrony (3.3~pre1-1) experimental; urgency=medium

  * Import upstream version 3.3-pre1:
    - Please see /usr/share/doc/chrony/changelog.gz for the release notes.

  * debian/copyright:
    - Add “hash_nettle.c” copyright information and update copyright year of
    test/unit/*

 -- Vincent Blut <email address hidden>  Thu, 15 Mar 2018 13:58:21 +0100
Superseded in buster-release on 2018-03-21
Superseded in sid-release on 2018-03-16
chrony (3.2-4) unstable; urgency=medium

  * debian/changelog:
    - Remove trailing spaces.

  * debian/chrony-dnssrv@.service:
    - Use NTP servers obtained from DNS SRV records.

  * debian/chrony-dnssrv@.timer:
    - Periodic lookup of DNS SRV records.

  * debian/chrony-helper:
    - New helper script to make use of NTP servers obtained from DHCP and
    _ntp._udp DNS SRV records.

  * debian/chrony.dhcp:
    - Add a dhclient-exit-hook script to add/remove NTP servers depending
    on the operations invoked by the DHCP client. (Closes: #889656)

  * debian/chrony.service:
    - Run “/usr/lib/chrony/chrony-helper update-daemon” after starting chronyd.

  * debian/control:
    - Suggest dnsutils. The dig utility is used to update files with NTP
    servers from DNS SRV records.

  * debian/init:
    - Run “/usr/lib/chrony/chrony-helper update-daemon” after starting chronyd.

  * debian/install:
    - Install the chrony-helper script in /usr/lib/chrony.
    - Install chrony-dnssrv@.* files in /lib/systemd/system.

  * debian/postinst:
    - Don’t use recursive chown as this is vulnerable to hardlink attacks on
    mainline, non-Debian kernels that do not have fs.protected_hardlinks=1.
    Thanks Lintian!

  * debian/postrm:
    - Remove “/run/chrony” on purge.

  * debian/rules:
    - Install the dhclient-exit-hook script in /etc/dhcp/dhclient-enter-hooks.

  * debian/tests/:
    - Use autopkgtest to ensure that chronyd can use NTP servers obtained from
    DHCP servers.

 -- Vincent Blut <email address hidden>  Tue, 20 Feb 2018 18:27:10 +0100
Superseded in buster-release on 2018-02-28
Superseded in sid-release on 2018-02-21
chrony (3.2-3) unstable; urgency=medium

  [ Christian Ehrhardt ]
  * debian/chrony.default:
    - Mention systemd service file in the comment.

  * debian/chrony.service:
    - Support the DAEMON_OPTS variable from “/etc/default/chrony” in systemd
    environment. (LP: #1746081, Closes: #889012)

  * debian/usr.sbin.chronyd:
    - Allow the creation of /run/chrony on demand.
    (LP: #1746444, Closes: #889011)

 -- Vincent Blut <email address hidden>  Wed, 07 Feb 2018 21:27:09 +0100
Superseded in buster-release on 2018-02-14
Superseded in sid-release on 2018-02-09
chrony (3.2-2) unstable; urgency=medium

  * Initial AppArmor profile for chronyd. Thanks to Jamie
    Strandboge <email address hidden>. (Closes: #888038)

  * debian/compat:
    - Bump to debhelper compat 11.

  * debian/control:
    - Bump standard-version to 4.1.3 (no changes required).
    - Build depend on debhelper ≥ 11.
    - Set “Rules-Requires-Root: no”.
    - Move Vcs-* to salsa.debian.org.

  * debian/copyright:
    - Add myself as a copyright holder for 2018.

  * debian/postinst:
    - Don’t force removal of cron file since it doesn’t exist anymore.

  * debian/preinst:
    - Update the chrony version on which to act.
    - Add the debhelper token.

  * debian/usr.sbin.chronyd:
    - Improve AppArmor profile to support more chronyd features and ease
    portability with other distros.

 -- Vincent Blut <email address hidden>  Sun, 28 Jan 2018 19:33:46 +0100
Published in stretch-release on 2017-10-07
chrony (3.0-4+deb9u1) stretch; urgency=medium

  * debian/chrony.if-up:
    - Do not pass the “burst” command to chronyc as the script could return an
    error in certain situations. As a consequence, that would prevent ifupdown
    from writing the current state of the interfaces in /run/network/ifstate.
    Thanks to John Eikenberry <email address hidden> for reporting that issue.
    (Closes: #868491)

  * debian/chrony.ppp.ip-up:
    - Take the same action as for the “chrony.if-up” script as a precautionary
    measure.

 -- Vincent Blut <email address hidden>  Sat, 22 Jul 2017 17:24:44 +0200
Superseded in buster-release on 2018-02-03
Superseded in sid-release on 2018-01-29
chrony (3.2-1) unstable; urgency=medium

  * Import upstream version 3.2:
    - Please see /usr/share/doc/chrony/changelog.gz for the release notes.

 -- Vincent Blut <email address hidden>  Fri, 15 Sep 2017 11:37:10 +0200
Deleted in experimental-release (Reason: None provided.)
chrony (3.2~pre2-1) experimental; urgency=medium

  * Import upstream version 3.2-pre2:
    - Please see /usr/share/doc/chrony/changelog.gz for the release notes.

  * debian/control:
    - Bump standard-version to 4.1.0 (no changes required).

  * debian/copyright:
    - Update copyright years.

 -- Vincent Blut <email address hidden>  Wed, 30 Aug 2017 15:48:37 +0200
Superseded in experimental-release on 2017-09-10
chrony (3.2~pre1-1) experimental; urgency=medium

  * Import upstream version 3.2-pre1:
    - Please see /usr/share/doc/chrony/changelog.gz for the release notes.

  * debian/patches/*:
    - Remove allow_getpid_in_seccomp_filter.patch and update the series file
    accordingly.

  * debian/tests/upstream-simulation-test-suite:
    - Run tests in multiple iterations.

 -- Vincent Blut <email address hidden>  Tue, 25 Jul 2017 21:13:22 +0200
Superseded in buster-release on 2017-09-21
Superseded in sid-release on 2017-09-16
chrony (3.1-5) unstable; urgency=medium

  * debian/chrony.if-up:
    - Do not pass the “burst” command to chronyc as the script could return an
    error in certain situations. As a consequence, that would prevent ifupdown
    from writing the current state of the interfaces in /run/network/ifstate.
    Thanks to John Eikenberry <email address hidden> for reporting that issue.
    (Closes: #868491)

  * debian/chrony.ppp.ip-up:
    - Take the same action as for the “chrony.if-up” script as a precautionary
    measure.

 -- Vincent Blut <email address hidden>  Mon, 17 Jul 2017 16:47:56 +0200

Available diffs

Superseded in buster-release on 2017-07-26
Superseded in sid-release on 2017-07-21
chrony (3.1-4) unstable; urgency=medium

  * Now that Stretch has been released (\o/), let’s upload chrony 3.1 to
    unstable.

  * debian/:
    - Remove the menu file used to launch “chronyc”. It is a CLI only tool,
    thus it probably does not make a lot of sense to keep it in the Debian
    menu.

  * debian/control:
    - Drop dependency on pre-jessie util-linux version.
    - Bump standard-version to 4.0.0 (no changes required).

  * debian/tests/upstream-simulation-test-suite:
    - Fix the leading comment which mentioned “vm” despite the fact that the
    test runs in a container.

 -- Vincent Blut <email address hidden>  Mon, 19 Jun 2017 02:30:10 +0200

Available diffs

Deleted in experimental-release (Reason: None provided.)
chrony (3.1-3) experimental; urgency=medium

  * debian/chrony.if-{post-down,up}:
    - Remove unnecessary “else” statements.

  * debian/chrony.ppp.ip-down:
    - Don’t check and delete “/var/run/chrony-ppp-up”, that file doesn’t exist
    anymore.
    - Check for pid file existence instead of calling “pidof”.

  * debian/chrony.ppp.ip-up:
    - Don’t create “/var/run/chrony-ppp-up” file after the ppp link came up.
    - Check for pid file existence instead of calling “pidof”.
    - Don’t call “chronyc” using its absolute path.
    - Check for the presence of a default route before advising “chronyd” that
    the network connectivity to the sources is ready.

  * debian/init:
    - Check if “$PIDFILE” exists before taking action.
    - Do not print informational messages.
    - Remove the “chronyd” pid file when stopping as it doesn’t do it on
    its own.
    - Rework the “restart|force-reload” pattern.
    - Make use of some init-functions.
    - Print a message if “chronyd” is already running while attempting to start
    it.
    - Do not delete “/var/run/chrony-ppp-up”, that file doesn’t exist anymore.

  * d/rules:
    - Move the default pid file from “/var/run” to “/run”.

  * d/tests/*:
    - Use autopkgtest facility to run the upstream simulation test suite.

 -- Vincent Blut <email address hidden>  Sun, 14 May 2017 17:26:15 +0200
Superseded in stretch-release on 2017-10-07
Superseded in sid-release on 2017-06-21
chrony (3.0-4) unstable; urgency=medium

  * debian/patches/*:
    - Backport commit 768bce799bfe to make chrony operable with the syscall
    filtering feature enabled in level 1. (Closes: #861258)

 -- Vincent Blut <email address hidden>  Wed, 26 Apr 2017 17:39:44 +0200

Available diffs

Superseded in experimental-release on 2017-05-14
chrony (3.1-2) experimental; urgency=medium

  * Merge branch 'master' into experimental. (Closes: #861258)

  * debian/patches/*:
    - Remove the “fix_time_smoothing_in_interleaved_mode.patch” patch. Not
    needed anymore.

 -- Vincent Blut <email address hidden>  Wed, 26 Apr 2017 21:17:43 +0200
Superseded in stretch-release on 2017-05-04
Superseded in sid-release on 2017-04-28
chrony (3.0-3) unstable; urgency=medium

  * debian/patches/*:
    - Backport an upstream patch to fix time smoothing in interleaved mode.
    (Closes: #854424)

 -- Vincent Blut <email address hidden>  Tue, 07 Feb 2017 00:37:24 +0100

Available diffs

Superseded in experimental-release on 2017-04-28
chrony (3.1-1) experimental; urgency=medium

  * Import upstream version 3.1:
    - Please see /usr/share/doc/chrony/changelog.gz for the release notes.

  * debian/chrony.conf:
    - Remove the “hwclockfile” directive. Unneeded now that the configure
    script allows us to set the default path to the adjtime file via the
    “--with-hwclockfile” option.

  * debian/copyright:
    - Update copyright years.

  * debian/rules:
    - Specify default path to hwclock adjtime file.

 -- Vincent Blut <email address hidden>  Thu, 02 Feb 2017 19:24:30 +0100
Superseded in stretch-release on 2017-02-13
Superseded in sid-release on 2017-02-08
chrony (3.0-2) unstable; urgency=medium

  * debian/chrony.conf:
    - Disable logging by default, it waste some disk space and users are
    probably better served by “chronyc sources” and “chronyc sourcestats”
    commands anyway.

  * debian/chrony.service:
    - Remove the “Restart=on-failure” option. There are possible security
    implications for NTP clients.

  * debian/dirs:
    - Add etc/logrotate.d to avoid build failure.

  * Remove our logrotate configuration file in favour of the upstream’s one.

 -- Vincent Blut <email address hidden>  Wed, 18 Jan 2017 15:26:31 +0100

Available diffs

Superseded in sid-release on 2017-01-19
chrony (3.0-1) unstable; urgency=medium

  * Import upstream version 3.0:
    - Please see /usr/share/doc/chrony/changelog.gz for the release notes.

  * Merge branch “experimental”:
    - Enable support for MS-SNTP authentication in Samba.
    - Rename --chronysockdir to --chronyrundir.
    - Enable seccomp facility on powerpcspe.

  * debian/chrony.conf:
    - Make use of the “makestep” directive to step the system clock instead of
    slewing it when necessary.
    - Drop the “offline” option as per upstream’s advice to render chrony’s
    start-up sequence safer.

  * debian/chrony.service:
    - Reflect init-helper script deletion.

  * debian/copyright:
    - Add myself as a copyright holder for 2017.
    - Adjust copyright holders and update some copyright years. Kudos to Paul
    Gevers <email address hidden> for spotting the necessary updates.

  * debian/init:
    - Reflect init-helper script deletion.

  * debian/install:
    - Don’t install the init-helper script, it has been deleted.

  * debian/README.Debian:
    - Remove obsolete information.

  * Remove the init-helper script as it no longer needed.

 -- Vincent Blut <email address hidden>  Tue, 17 Jan 2017 22:05:31 +0100

Available diffs

Deleted in experimental-release (Reason: None provided.)
chrony (3.0~pre3-1) experimental; urgency=low

  * Import upstream version 3.0-pre3:
    - Please see /usr/share/doc/chrony/changelog.gz for the release notes.

 -- Vincent Blut <email address hidden>  Fri, 06 Jan 2017 14:20:13 +0100
Superseded in experimental-release on 2017-01-11
chrony (3.0~pre2-2) experimental; urgency=low

  * Merge branch “master”.

  * Enable seccomp facility on powerpcspe.

 -- Vincent Blut <email address hidden>  Tue, 03 Jan 2017 18:17:13 +0100
Superseded in stretch-release on 2017-01-29
Superseded in sid-release on 2017-01-18
chrony (2.4.1-3) unstable; urgency=medium

  * debian/apm:
    - Removing that script as APM as been replaced by ACPI long time ago, thus
    it’s highly probable that it isn’t useful anymore.

  * debian/chrony.maintscript:
    - Remove the apm script’s conffile.

  * debian/chrony.service:
    - Supply a systemd service file.
    - Update unit section’s description. Add chronyc and chrony.conf man pages
    information and remove reference to “/usr/share/doc/chrony.txt.gz” which
    is not generated anymore.
    - Update unit section’s documentation.

  * debian/dirs:
    - Don’t create etc/apm/event.d as the apm script isn’t provided anymore.

  * debian/init:
    - Convert to use the init-helper script.

  * debian/init-helper:
    - Add a helper script that will be used to maintain feature parity between
    the SysV script and the systemd service file.

  * debian/install:
    - Install the init-helper script in “/usr/lib/chrony”.

  * debian/rules:
    - Don’t install the now removed apm script.

 -- Vincent Blut <email address hidden>  Thu, 22 Dec 2016 02:16:54 +0100

Available diffs

Superseded in experimental-release on 2017-01-04
chrony (3.0~pre2-1) experimental; urgency=low

  * Import upstream version 3.0-pre2:
    - Please see /usr/share/doc/chrony/changelog.gz for the release notes.

 -- Vincent Blut <email address hidden>  Thu, 15 Dec 2016 15:23:44 +0100
Superseded in experimental-release on 2016-12-16
chrony (3.0~pre1-1) experimental; urgency=low

  * Import upstream version 3.0-pre1:
    - Please see /usr/share/doc/chrony/changelog.gz for the release notes.

  * debian/copyright:
    - Mention new files.

  * debian/rules:
    - Enable support for MS-SNTP authentication in Samba.
    - Rename --chronysockdir to --chronyrundir.

 -- Vincent Blut <email address hidden>  Sat, 10 Dec 2016 16:30:19 +0100
Superseded in stretch-release on 2017-01-02
Superseded in sid-release on 2016-12-23
chrony (2.4.1-2) unstable; urgency=medium

  * debian/chrony.conf:
    - Don’t create sample histories by default. Using that feature does not
    make a lot of sense when using a pool of rapidely rotating time servers.
    - Remove unused directives.
    - Improve (well, I hope! ;-) ) the configuration file readability.
    - Reword the driftfile directive commentary.
    - Shorten the lead-in comment.

  * debian/control:
    - Build-depend on pps-tools only on linux.
    - Remove libnss3-dev from Build-Depends until #846012 is fixed.

  * debian/init:
    - Don’t pass the “-r” option when restarting chronyd as we have disabled
    the creation of sample histories by default.

  * debian/rules:
    - Drop dh_auto_build override. Nowadays, the documentation is built by
    default.

 -- Vincent Blut <email address hidden>  Fri, 9 Dec 2016 16:58:32 +0100

Available diffs

Superseded in stretch-release on 2016-12-20
Superseded in sid-release on 2016-12-10
chrony (2.4.1-1) unstable; urgency=medium

  * Import upstream version 2.4.1:
    - Please see /usr/share/doc/chrony/changelog.gz for the release notes.

  * debian/chrony.default:
    - New file used to pass options to chronyd. Thanks to nutzteil
    <email address hidden> for the suggestion and the initial patch.
    (Closes: #834240)

  * debian/compat:
    - Bump to debhelper compat 10.

  * debian/control:
    - Build depend on debhelper ≥ 10.

  * debian/copyright:
    - Use HTTPS for all URI.

  * debian/init:
    - Read and execute options assigned to the “DAEMON_OPTS” variable.

  * debian/rules:
    - Drop dh “--parallel” option. Enabled by default in debhelper 10.

 -- Vincent Blut <email address hidden>  Mon, 21 Nov 2016 12:58:05 +0100

Available diffs

Superseded in stretch-release on 2016-11-27
Superseded in sid-release on 2016-11-22
chrony (2.4-1) unstable; urgency=medium

  The “Fix decade-old bug reports” release.

  * Import upstream version 2.4:
    - Please see /usr/share/doc/chrony/changelog.gz for the release notes.

  * debian/chrony.if-{up,post-down}:
    - New scripts used to put chronyd online/offline depending on the
    state of the connection. (Closes: #240528,#312092,#389961)

  * debian/chrony.keys:
    - Highlight “chronyc keygen” command to generate keys.

  * debian/chrony.ppp.ip-down:
    - Be sure that there is no default route before going offline.
    (Closes: #252131)

  * debian/control:
    - Remove install-info dependency.
    - Remove texinfo build dependency since documentation in Texinfo format
    has been dropped upstream.
    - Build depend on asciidoctor ≥ 1.5.3-1~. The version constraint is
    important since chrony’s man pages are generated from “adoc” files, a
    functionality that has been added in asciidoctor 1.5.3.

  * debian/dirs:
    - Add “etc/NetworkManager/dispatcher.d”.

  * debian/doc-base:
    - Remove the file since we do not generate chrony.{html,txt} anymore.

  * debian/docs:
    - Remove references to chrony.{html,txt}.

  * debian/patches/*:
    - Drop fix-ftbfs-on-powerpc-ppc64-ppc64el.diff; applied upstream.
    - Update the “series” file accordingly.

  * debian/postinst:
    - Use ucfr to associate chrony with its configuration files. Suggested by
    Paul Gevers <email address hidden>

  * debian/postrm:
    - Remove all vestiges of the association between chrony and its
    configuration files. Also suggested by Paul Gevers <email address hidden>

  * debian/rules:
    - Provide upstream NetworkManager dispatcher script.

  * debian/watch:
    - Use HTTPS to fetch new upstream releases.
    - Switch to version 4 format.

 -- Vincent Blut <email address hidden>  Fri, 17 Jun 2016 17:20:08 +0200

Available diffs

Published in jessie-release on 2016-06-05
chrony (1.30-2+deb8u2) jessie; urgency=medium

  * Fix CVE-2016-1567: Restrict authentication of server/peer to specified
    key. (Closes: #812923)

  * debian/postrm:
    - Remove /var/lib/chrony on purge only. (Closes: #568492)

  * debian/logrotate:
    - Rework postrotate script. (Closes: #763542)

 -- Vincent Blut <email address hidden>  Sat, 21 May 2016 02:27:34 +0200
Superseded in stretch-release on 2016-06-23
Superseded in sid-release on 2016-06-18
chrony (2.3-2) unstable; urgency=low

  * Cherry pick upstream patch to fix FTBFS on PowerPC, ppc64 and ppc64el
    architectures.

 -- Vincent Blut <email address hidden>  Fri, 20 May 2016 14:21:14 +0200
Superseded in sid-release on 2016-05-22
chrony (2.3-1) unstable; urgency=low

  * Import upstream version 2.3:
    - Please see /usr/share/doc/chrony/changelog.gz for the release notes.
    (Closes: #818235)

  * debian/chrony.conf:
    - Drop the “logchange” directive. Upstream has enabled “logchange” by
    default with a threshold of 1 second. We now use that instead of our custom
    threshold of 0,5 second which tended to spam syslog.
    - Remove obsolete comment.

  * debian/chrony.lintian-overrides:
    - Update “chrony.keys” path

  * debian/control:
    - Bump standard-version to 3.9.8 (no changes required).
    - Use HTTPS transport protocol for the homepage URL.

  * debian/copyright:
    - Add some entries about new or untracked files.

  * debian/postinst:
    - Move /usr/share/chrony/chrony.keys template to /etc/chrony using ucf.
    - Avoid displaying needless prompt when upgrading to chrony ≥ 2.2.1-1.
    (Closes: #820087)

  * debian/postrm:
    - Remove chrony.keys on purge.
    - Remove all vestiges of chrony.keys from the state hashfile.

  * debian/rules:
    - Re-enable test suite.
    - Remove dh_installinit override. The init script is LSB-compliant so
    passing the “default” option or the two-digit sequence number is unneeded.
    - Explicitly set the NTP era. With this change, the NTP time will be
    mapped from 1970-01-01T00:00:00Z to 2106-02-07T06:28:16Z. Thanks to this
    fixed value, chrony build should be reproducible.
    - Move the key file template (chrony.keys) in /usr/share/chrony.
    - Force /usr/share/chrony/chrony.keys to use 0640 modes.

 -- Vincent Blut <email address hidden>  Wed, 18 May 2016 23:13:05 +0200
Superseded in sid-release on 2016-05-21
chrony (2.2.1-1) unstable; urgency=medium

  * Import upstream versions 2.2 and 2.2.1:
    - Please see /usr/share/doc/chrony/changelog.gz for the release notes.
    - The 2.2.1 release version fixes CVE-2016-1567. (Closes: #812923)

  * debian/chrony.conf:
    - Drop the commandkey directive. It is obsolete since the introduction of a
    Unix domain command socket in chrony 2.2.
    - Fix keyfile directive commentary.

  * debian/chrony.keys:
    - New file template.

  * debian/chrony.lintian-overrides:
    - New file used to force lintian to stop complaining about the “chrony.keys”
    file modes (0640).

  * debian/chrony.ppp.ip-down:
    - Drop obsolete authentication method to the chronyd daemon. This is now
    handled by the usage of a Unix domain command socket.

  * debian/chrony.ppp.ip-up:
    - Drop obsolete authentication method to the chronyd daemon. This is now
    handled by the usage of a Unix domain command socket.
    - Reinstate the “burst” chronyc command.

  * debian/control:
    - Build depend on libseccomp-dev ≥ 2.2.3-3~. We need it to provide syscall
    filtering.
    - Fix a typo relative to the name of an architecture.
    - Build depend on pkg-config.
    - Restrict libcap-dev build dependency on Linux only.
    - Depend on iproute2 instead of net-tools.
    - Drop timelimit dependency.
    - Update Vcs-Git to use HTTPS.
    - Bump standard-version to 3.9.7 (no changes required).

  * debian/copyright:
    - Update copyright year for debian/*.

  * debian/init:
    - Make use of “ip r” instead of “netstat -rn”. (Closes: #818234)
    - Delete unused “FLAGS” variable.
    - Do not execute ip and chronyc through timelimit.
    - Don’t call chronyc using its absolute path.
    - Check if the value of the DAEMON variable is executable.
    - Drop the two seconds delay as it should be unnecessary.
    - Drop obsolete authentication method from the putonline() function.
    - Fix indentation issue in the putonline() function.

  * debian/logrotate:
    - Do not pass the “-a” option to chronyc, it’s no longer necessary.

  * debian/NEWS:
    - Add a comment about the command key suppression from the “chrony.keys”
    file.

  * debian/patches/:
    - Drop 01_do-not-install-copying-file.patch, not needed anymore.
      ↳ Remove reference to that patch from the series file.

  * debian/postinst:
    - Do not create an ID/key pair for command authentication. Configuration
    and monitoring via chronyc is now done using Unix domain socket accessible
    by root or by the system user to which chronyd will drop root privileges,
    i.e. _chrony.

  * debian/postrm:
    - Remove /var/lib/chrony content only on purge. (Closes: #568492)

  * debian/README.Debian:
    - Drop obsolete statement.

  * debian/rules:
    - Build with --enable-scfilter.
    - Install the “chrony.keys” file in /etc/chrony/ with 0640 modes.
    - Override dh_fixperms to prevent it from modifying modes of the
    “chrony.keys” file. By default, dh_fixperms tries to set the default modes
    (0644).
    - Move the “chronyd.sock” file from /var/run/chrony to /run/chrony.

 -- Vincent Blut <email address hidden>  Sat, 19 Mar 2016 14:42:23 +0100

Available diffs

Superseded in jessie-release on 2016-06-05
chrony (1.30-2+deb8u1) jessie; urgency=medium

  * Build depend on libcap-dev. Without it, chronyd can’t drop root
    privileges. (Closes: #768803)

 -- Vincent Blut <email address hidden>  Wed, 09 Sep 2015 19:50:09 +0200
Superseded in stretch-release on 2016-05-27
Superseded in sid-release on 2016-04-02
Superseded in stretch-release on 2015-12-27
Superseded in sid-release on 2015-12-27
chrony (2.1.1-1) unstable; urgency=medium

  * Import upstream version 2.0 and 2.1.1:
    - Please see /usr/share/doc/chrony/changelog.gz for the release notes.

  * debian/:
    - Rename ppp scripts from ip-{up,down} to chrony.ppp.ip-{up,down}.
    Necessary to let dh_installppp do its magic.

  * debian/chrony.conf:
    - Use the new 'pool' directive to specify the pool of NTP servers.
    - Use the iburst option to speed up the initial synchronization.
    - Drop the minpoll option. There is no point to deviate from upstream here.
    Consequently, the default minimum polling interval is now 64 seconds
    instead of 256 seconds.
    - Enable kernel synchronization of the RTC via the 'rtcsync' directive.
    - Drop the commented out 'rtcfile' directive in the configuration file.
    - Stricly act as an NTP client by default. Serving time to other systems
    should be the decision of the administrator(s). (Closes: #778770)
    - Clarify some comments.
    - Improve comment about the 'commandkey' directive.

  * debian/control:
    - Drop 'Recommends: udev (>= 0.124-1)' since it predates Debian squeeze.

  * debian/copyright:
    - Update copyright years.
    - Various cleanups.
    - Update relative to sys_macosx.{c,h} files.
    - The test/simulation/test.common file is under the GPL-2+ license.
    Thanks to Paul Gevers <email address hidden> for catching it.

  * debian/NEWS:
    - Comment the deactivation of the NTP server capability by default.

  * debian/patches/:
    - Refresh 01_do-not-install-copying-file.patch.

  * debian/README.Debian:
    - Fix misleading information.

  * debian/rules:
    - No need to install ppp scripts from the 'rules' script. Let dh_installppp
    handle that.

 -- Vincent Blut <email address hidden>  Wed, 18 Nov 2015 00:11:23 +0100

Available diffs

Superseded in stretch-release on 2015-11-24
Superseded in sid-release on 2015-11-19
chrony (1.31.1-2) unstable; urgency=medium

  * Rename the NEWS.Debian file to NEWS. dh_installchangelogs doesn’t seems
    to be able to deal with the former name.

 -- Vincent Blut <email address hidden>  Thu, 17 Sep 2015 21:50:30 +0200

Available diffs

Superseded in stretch-release on 2015-09-28
Superseded in sid-release on 2015-09-25
chrony (1.31.1-1) unstable; urgency=medium

  * Import upstream version 1.31 and 1.31.1:
    - Please see /usr/share/doc/chrony/changelog.gz for release notes.

  * debian/chrony.conf:
    - Use the 'hwclockfile' directive. Avoid using text processing methods in
    the post install script to find out if the RTC keeps local time or UTC.
    (Closes: #778710)

  * debian/clean:
    - Add getdate.c

  * debian/control:
    - Move chrony from admin to net section.
    - Change priority from extra to optional.
    - Build depends on libcap-dev. (Closes: #768803)
    - Bump standards-version to 3.9.6 (no changes required).
    - Set myself as maintainer and Joachim as uploader.
    - Update Vcs-Browser URL to use cgit and https.
    - Build depends on pps-tools. Provides PPSAPI (RFC-2783) support.
    - Improve the synopsis.
    - Depend on util-linux (>= 2.20.1-5). Ensure that the 'UTC=' setting
    from the '/etc/default/rcS' file have been migrated to UTC/LOCAL in
    '/etc/adjtime'.
    - Depends on adduser. Needed to create "_chrony" system user/group.

  * debian/copyright:
    - Add myself to copyright holders.
    - Remove spaces from short name license (fix Lintian warning)
    - Filled short license field (RSA-MD) (fix Lintian warning)
    - Move comment to the "Comment:" field

  * debian/logrotate:
    - Simplify postrotate script. Thanks to Frédéric Brière
    <email address hidden> for reporting and diagnosing the issue.
    (Closes: #763542)

  * debian/patches:
    - Drop patches for issues fixed upstream.
    - Rename and update patch. Update the series file accordingly.

  * debian/postinst:
    - Pass the '--three-way' option to ucf.
    - Remove useless text processing methods as we now use the 'hwclockfile'
    directive. (Closes: #778711)
    - Create "_chrony" system user/group.
    - Update the "new_file" path in the ucf invocation.
    - Remove the MAILPASSWORD shell variable as we don’t use it.

  * debian/postrm:
    - Drop removal instruction of /etc/cron.weekly/chrony.
    - Remove "_chrony" system user/group on purge.
    - Don’t pass the --group option to deluser.

  * debian/NEWS.Debian:
    - New file incorporating worthwhile changes in this release.

  * debian/README.Debian:
    - Fix typo, thanks to Paul Gevers <email address hidden> for catching it.
    - Missing word added.

  * debian/rules:
    - Build with all hardening flags.
    - Ease the reading of configure options.
    - Specify "_chrony" as default chronyd user. This is the system user to
    which chronyd will drop root privileges. You'll find further information
    in /usr/share/doc/chrony/README.Debian.
    (Closes: #688971)

 -- Vincent Blut <email address hidden>  Sun, 6 Sep 2015 22:39:22 +0200
Published in wheezy-release on 2015-09-05
chrony (1.24-3.1+deb7u3) wheezy-security; urgency=medium

  * With the following security bugfixes (See: #782160):
    - Fix CVE-2015-1853: Protect authenticated symmetric NTP
                         associations against DoS attacks.
    - Fix CVE-2015-1821: Fix access configuration with subnet
                         size indivisible by 4.
    - Fix CVE-2015-1822: Fix initialization of reply slots for
                         authenticated commands.

 -- Joachim Wiedorn <email address hidden>  Fri, 10 Apr 2015 22:25:52 +0200
Superseded in stretch-release on 2015-09-14
Superseded in jessie-release on 2016-01-23
Superseded in sid-release on 2015-09-09
chrony (1.30-2) unstable; urgency=medium


  * With the following security bugfixes (Closes: #782160):
    - Fix CVE-2015-1853: Protect authenticated symmetric NTP
                         associations against DoS attacks.
    - Fix CVE-2015-1821: Fix access configuration with subnet
                         size indivisible by 4.
    - Fix CVE-2015-1822: Fix initialization of reply slots for
                         authenticated commands.
  * debian/control:
   - Update e-mail address of myself.
   - Add Vincent Blut as co-maintainer.

 -- Joachim Wiedorn <email address hidden>  Fri, 10 Apr 2015 11:41:31 +0200

Available diffs

Superseded in jessie-release on 2015-04-16
Superseded in sid-release on 2015-04-10
chrony (1.30-1) unstable; urgency=medium


  * New upstream release with following bugfixes:
    - Fix crash when selecting with multiple preferred sources.
    - Fix frequency calculation with large frequency offsets.
    - Fix code writing drift and RTC files to compile correctly.
    - Fix -4/-6 options in chronyc to not reset hostname set by -h.
    - Fix refclock sample validation with sub-second polling interval.
    - Set stratum correctly with non-PPS SOCK refclock and local stratum.
    - Modify dispersion accounting in refclocks to prevent PPS getting
        stuck with large dispersion and not accepting new samples.
    - Move faq.txt (PHP style) to a plain text file FAQ. Closes: #415729

  * Add gpg signature of upstream developer for use with uscan.
  * Update debian/watch, add check of upstream gpg signature.
  * Update all patches.

  * Bugfix: Use /etc/adjtime in postinst script to recognize
      UTC hardware clock.  Closes: #680498
  * Use logrotate instead of cron script. Closes: #323966
  * debian/rules: disable test simulation.

  * debian/control: remove obsolete build dependency to dpkg-dev.
  * debian/install, debian/dirs, debian/clean: Update.
  * debian/copyright: Update and add entries.

 -- Joachim Wiedorn <email address hidden>  Sun, 10 Aug 2014 19:10:35 +0200

Available diffs

Superseded in jessie-release on 2014-08-16
Superseded in sid-release on 2014-08-11
chrony (1.29.1-1) unstable; urgency=high


  * New upstream release with bugfix:
    - Closes: #737644: Fixing vulnerability:
        CVE-2014-0021 - traffic amplification in cmdmon protocol
        (incompatible with previous protocol version, but chronyc
        supports both).

 -- Joachim Wiedorn <email address hidden>  Thu, 06 Feb 2014 15:51:47 +0100

Available diffs

Superseded in wheezy-release on 2015-09-05
chrony (1.24-3.1+deb7u2) wheezy-security; urgency=low


  * CVE-2013-4502, CVE-2013-4503

 -- Moritz Mühlenhoff <email address hidden>  Wed, 21 Aug 2013 00:06:50 +0200
Superseded in jessie-release on 2014-02-13
Superseded in sid-release on 2014-02-11
chrony (1.29-1) unstable; urgency=medium


  * New upstream release with some bugfixes:
    - Closes: #719132: new upstream version, fixes security bugs.
    - Closes: #719203: Fixing vulnerabilities:
        CVE-2012-4502 - Buffer overflow,
        CVE-2012-4503 - Uninitialized data.

  * debian/control:
    - Set myself as new maintainer. Closes: #705768
    - Bump to Standards-Version 3.9.5.
    - Move to debhelper >= 9 and compat level 9.
    - Update package descriptions.
    - Add Vcs fields to new git repository.
    - Add dependency to lsb-base (for init script).
    - Add build dependency to libtomcrypt-dev.
  * Move to source format 3.0 (quilt).
  * Add the following patch files:  (Closes: #637514)
    - 01_fix-small-typo-in-manpages
    - 03_recreate-always-getdate-c
    - 04_do-not-look-for-ncurses    (Closes: #646732)
    - 05_disable-installation-of-license
  * debian/rules:
    - Move to dh-based rules file.
    - Enable parallel builds.

  * Add debian/watch file.
  * Full update of debian/copyright file.
  * Add debian/doc-base file.
  * Full update of debian/README.Debian file.
  * Update debian/postinst, debian/postrm, debian/prerm. 
  * Remove obsolete debian/preinst. Reduce mailing within postinst.
  * Do not use old md5sum file anymore for ucf in postinst script.
  * Add status action in init script (debian/init). Closes: #652207
  * Add debian/install file for installing example of chrony.conf.
  * Reduce debian/dirs file for use with debhelper 9.

 -- Joachim Wiedorn <email address hidden>  Fri, 20 Dec 2013 23:35:25 +0100

Available diffs

Published in squeeze-release on 2013-10-19
chrony (1.24-3+squeeze1) oldstable-security; urgency=low


  * CVE-2013-4502, CVE-2013-4503

 -- Moritz Muehlenhoff <email address hidden>  Sat, 21 Sep 2013 12:15:18 +0000
Deleted in jessie-release (Reason: None provided.)
Superseded in sid-release on 2013-12-21
chrony (1.26-4) unstable; urgency=low


  * QA upload.
  * Depend on net-tools, for netstat (closes: #707260).

 -- Colin Watson <email address hidden>  Mon, 08 Jul 2013 18:00:45 +0100

Available diffs

Superseded in jessie-release on 2013-07-19
Superseded in sid-release on 2013-07-09
chrony (1.26-3) unstable; urgency=low


  * Orphaned.

 -- John G. Hasler <email address hidden>  Fri, 19 Apr 2013 13:08:31 -0500

Available diffs

Superseded in wheezy-release on 2014-01-27
chrony (1.24-3.1+deb7u1) wheezy; urgency=medium


  * Non-maintainer upload.

  * Fix: Remove obsolete check for supported kernel versions (rtc_linux.c)
      to run also for kernel versions 3.0 and higher. Since kernel 2.2 all
      kernels have RTC support. Backport of upstream patch for version 1.26.
      Solves: #642209 for version 1.24. Closes: #691340

  * Fix: Enable full support for kernel versions 3.0 and higher (sys_linux.c)
      and ignore nonexistent patch level of kernel version (which come with
      some kernel versions). Backport of upstream patch for version 1.26.
      Solves: #628919 for version 1.24. Closes: #689012

 -- Joachim Wiedorn <email address hidden>  Fri, 16 Nov 2012 10:01:01 +0100
Superseded in sid-release on 2013-04-20
chrony (1.26-2) unstable; urgency=low


  * Fixed Makefile.in so that getdate.c gets made (and removed
    in "clean").  This will go upstream.  Moved faq stuff in rules
    from binary-indep to binary-arch.
  * Restored accidently deleted nmu changelog entry.
  
  * Applied patch from Moritz Muehlenhoff <email address hidden>
    Closes: #655123 Please enabled hardened build flags

  * Fixed upstream.
    Closes: #518385 Chrony segfaults on startup (narrowed down to
    chronyc and "burst")
  
  * Added DEB_BUILD_OPTIONS=noopt to rules.
    Added build-arch and build-indep to rules.
    Prefix is now 'usr'.
    Changed to dh_installman.
    Fixed "clean:" target.
    Closes: #479389 Improvements for debian/rules
  
  * Fixed upstream.
    Closes: #195620 Strange "System time : xxx seconds slow of NTP time"
    output
  
  * Upstream changes should have fixed this.  
    Closes:#294030 chronyd makes the whole system briefly (< 1 second) 
    freeze
  
  * Fixed by upstream changes and new LSB headers.
    Closes: #407466 Chrony won't access hardware clock but prevents 
    hwclock from doing so either
  
 -- John G. Hasler <email address hidden>  Sun, 01 Jul 2012 22:05:56 -0500

Available diffs

Superseded in sid-release on 2012-07-03
chrony (1.26-1) unstable; urgency=low


  * New upstream release
    Closes: #348554: chrony and hwclock packages not coordinated.
    Closes: #572964: RTC support is missing.
    Closes: #642209: add RTC support for linux 3.0.
    Closes: #644241: new upstream version 1.26 available.
   
  * Applied patches from Joachim Wiedorn <email address hidden>:
    Fixed several typos in man pages and README.
    Added version.h.
    Moved default chrony.conf to debian/ .  
    Renamed cron and init files.
    Removed debian/NEWS.Debian, debian/info.
    Added debian/clean.
    Updated debian/copyright.  COPYING stays.  Upstream requires it.
    Fixed debian/menu, debian/control, updated debian/compat.
    Added "--without-readline" to debian/rules: rewrite later.
    Minor fixes to initscript: rewrite later.
  
    Closes: #646732 Move from readline support to editline support.
    Closes: #598253 Fix typo in LSB init headers ($hwclock to $time).
    Closes: #600403 Fix init check with PPP connection.
  
 -- John G. Hasler <email address hidden>  Sun, 17 Jun 2012 21:55:47 -0500
Superseded in wheezy-release on 2012-11-28
Superseded in sid-release on 2012-07-03
chrony (1.24-3.1) unstable; urgency=low


  * Non-maintainer upload.
  * Add patch (directly over the source...), to work with kernels > 3.0.0,
    by Paul Martin at http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=628919#15.
    (Closes: #628919)
  * Fix readline build-depends from "libreadline5-dev | libreadline-dev" to
    libreadline-gplv2-dev because chrony is GPLv2 only.  (Closes: #634447)
  * Update copyright file to say that chrony is GPLv2 only. (Closes: #637526)

 -- Ana Beatriz Guerrero Lopez <email address hidden>  Fri, 12 Aug 2011 12:32:26 +0200

Available diffs

Superseded in wheezy-release on 2011-09-21
Superseded in squeeze-release on 2013-10-19
Superseded in sid-release on 2011-09-20
chrony (1.24-3) unstable; urgency=high


  * Applied (modifed) patch from Gregor Herrmann.
  
    Closes: #593145: fails to configure on installation
    Closes: #552162: chrony incorrectly thinks that it has failed to
    (re)start
    Closes: #592930: invoke-rc.d: initscript chrony, action "start" failed.

 -- John G. Hasler <email address hidden>  Tue, 14 Sep 2010 10:06:47 -0500
Superseded in squeeze-release on 2011-09-13
Superseded in sid-release on 2011-09-20
chrony (1.24-2) unstable; urgency=low


  * Fixed regression that caused default CHRONY_IOC_ lines to
    vanish from io_linux.h thereby breaking hppa and ia64.

    Closes: #588930: FTBFS [ia64,hppa]: "I don't know the values of the 
    _IOC_* constants on your architecture"
  
  * $remote_fs was added in 1.24-1.  Depending on networking is neither
    necessary nor desireable.
  
    Closes: #590888: Dependencies on init.d script insuficcient
  
  * Still need to rewrite scripts.
  
 -- John G. Hasler <email address hidden>  Fri, 30 Jul 2010 20:32:55 -0500
Published in lenny-release on 2010-06-26
chrony (1.23-6+lenny1) stable-security; urgency=high


  * Non-maintainer upload by the Security Team.
  * This update addresses the following security issues:
    - CVE-2010-0292: chronyd replies to all cmdmon packets from unauthorized
      hosts with.
    - CVE-2010-0293: missing memory limit for to keep client information which
      can lead to memory exhaustion through clients with spoofed IPs
    - CVE-2010-0294: missing syslog limit could lead to filling up the disc
      by triggering various log events in a loop.

 -- Nico Golde <email address hidden>  Mon, 01 Feb 2010 12:24:34 +0000
Superseded in sid-release on 2011-09-20
chrony (1.24-1) unstable; urgency=low


  * New upstream release.  The scripts will be rewritten and many more bugs
    taken care of in -2.  Right now I want to get 1.24 out there.
  
  * Applied patch from Petter Reinholdtsen to init.d
  
    Closes: #541806: misses syslog dependency in LSB headers
  
  * Chrony cannot be linked to libreadline6 because it is GPLv2 only.
  
    Closes: #553739 replacing libreadline5-dev build dependency with 
    libreadline-dev

  * "configure" rewritten upstream, eliminating "+=".
  
    Closes: #573036: RTC support disabled (due to Bashism in configure line 293)
  
  * Removed "install-info" from scripts.
  
    Closes: #568703: dpkg warnings
  
  * client.c has been rewritten upstream.
  
    Closes: #573032
  
  * Fixed typos.
  
    Closes: #434629: 'man chrony', 'cronyc', 'cronyd' typos: "parateters" x 2, 
    "priviliges"
  
  * Added debian/source/format containing "1.0".
  
 -- John G. Hasler <email address hidden>  Tue, 22 Jun 2010 16:01:29 -0500
Superseded in squeeze-release on 2011-09-13
Superseded in sid-release on 2011-09-20
chrony (1.23-7) unstable; urgency=high


  * Applied patches from upstream to fix remote DOS:
  
    CVE-2010-0292 Don't reply to invalid cmdmon packets

    CVE-2010-0293 Limit client log memory size

    CVE-2010-0294 Limit rate of syslog messages 

 -- John G. Hasler <email address hidden>  Tue, 02 Feb 2010 19:37:50 -0600
Deleted in experimental-release (Reason: None provided.)
chrony (1.23-6rt1) experimental; urgency=low


  * Added support for mlockall().

 -- John Hasler <email address hidden>  Sun, 21 Dec 2008 12:33:09 -0600
Superseded in squeeze-release on 2011-09-13
Superseded in lenny-release on 2011-09-13
Superseded in sid-release on 2011-09-20
chrony (1.23-6) unstable; urgency=low


  * Commented out rtcfile directive in chrony.conf because it can cause
    lockups with certain combinations of motherboard and kernel (this is
    a known kernel bug).

    Closes: #508298: chronyd unreachable and does not work (clock drifts)
  
  * Chrony no longer uses the ppp/ip-up.d and ppp/ip-up.d files and the new
    init.d file won't hang if chronyc hangs.
  
    Closes: #448481: /etc/ppp/ip-up.d/chrony doesn't work when bindaddress is set.
  
  * Cannot reproduce on current version on amd64.
  
    Closes: #412961: error in tracking report (on amd64?)
  
 -- John Hasler <email address hidden>  Wed, 10 Dec 2008 14:16:37 -0600
Superseded in lenny-release on 2011-09-13
Superseded in sid-release on 2011-09-20
chrony (1.23-5) unstable; urgency=low


  * Replaced background kill with 'timelimit' in initscript.
  
    Closes: #505094: chrony: kills random netstat processes 

  * Added 'Recommends: udev (>= 0.124-1)'
  
    Closes: #497113: /dev/rtc renamed to /dev/rtc0 with linux-image-2.6-*/2.6.26+15
  
  * Had previously applied patch from Nathanael Nerode to fix configure
    bug but forgot to close the bug.
  
    Closes: #392273: Recursive dependency disease: chrony shouldn't depend on ncurses
  
 -- John Hasler <email address hidden>  Sun, 09 Nov 2008 20:19:22 -0600
Superseded in sid-release on 2011-09-20
chrony (1.23-4) unstable; urgency=low


  * Fixed dependency of init script on Pppconfig ip-up.d script by moving
    those lines into the init script.
  
  * Added checks to try to make sure that Chronyd is really, really running.
    Changed Netstat call to use -n, added code to kill it if it hangs.
    Added code to kill Chronyc if it can't contact Chronyd.
    Discussed the HPET/rtc problem in NEWS.Debian.
  
    Closes: #504000: init script hangs for a while might break upgrade

  * Added missing initialization to create_instance() in ntp_core.c.
    This was why UTI_NormaliseTimeval() was being called with huge
    values at times.

  * See comment on #195620 in 1.21z-6 below.  If you know of more LP64
    bugs reopen #348412 with a patch.
  
    Closes: #348412: chronyc not LP64 compliant
  
  * Added comment about sources being discarded to chrony.conf as suggested
    by Andreas Hübner in  #268289.
  
  * This is normal behavior.
   
    Closes: #287060: trimrtc takes 40 seconds to take effect
  
 -- John Hasler <email address hidden>  Thu, 06 Nov 2008 10:38:58 -0600
Superseded in sid-release on 2011-09-20
Superseded in lenny-release on 2011-09-13
chrony (1.23-3) unstable; urgency=high


  * Rewrote UTI_NormaliseTimeval()in util.c to use divide/remainder
    instead of loops at the suggestion of Gabor Gombas.  This prevents the
    problem of the loop running until the sun goes out when the function
    is called with a very large value for tv_usec on 64-bit architectures.
    Also fixed some other spots where the same loop was being used.
  
    Closes: #474294 Goes into endless loop
    Closes: #447011 chronyd stalls with 100% CPU usage
     
    I still don't know why the function is being called with such a 
    large value, however.

  * Changed default servers in chrony,conf to Debian servers.
  
    Closes: #434483: chrony: Should use NTP servers in Debian pool
  
 -- John Hasler <email address hidden>  Sat, 26 Apr 2008 11:47:44 -0500
165 of 65 results