Files
buildroot/package/ntpsec/0002-disable-PIE-support.patch
Peter Seiderer 1caeb632a6 package/ntpsec: security bump version to 1.2.5
Fixes: CVE-2026-18321:
https://nvd.nist.gov/vuln/detail/cve-2026-18321

- bump version to 1.2.5 (for details see [1])
- rebased 0001-wscript-remove-checks-for-bsd-string.h-fixes-host-co.patch
- rebased 0002-disable-PIE-support.patch
- removed 0003-ntpd-refclock_gpsd.c-Add-missing-time.h-for-strptim.patch
  (from upstream [2])
- moved 0004-refclock_gpsd-add-build-fix-for-gcc-14.x.patch to
  0003-refclock_gpsd-add-build-fix-for-gcc-14.x.patch, rebased and enhanced
  as the original conflicts with upstream commit 5505260c ("Fix redefined
  _XOPEN_SOURCE warning in refclock_gpsd.c") [3] and leads to the following
  compile failure:

    ../../ntpd/refclock_gpsd.c:113:21: error: operator ‘<’ has no left operand
      113 |   #if _XOPEN_SOURCE < 700
          |                     ^

[1] https://lists.ntpsec.org/pipermail/devel/2026-July/011029.html
[2] 5137c155d8
[3] 5505260cd1

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
[Julien: mark commit as "security bump"]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-09-27 10:23:34 +02:00

29 lines
846 B
Diff

From 93c8fe7187d1f8b2b4a41829272ffefc717165be Mon Sep 17 00:00:00 2001
From: Waldemar Brodkorb <wbx@openadk.org>
Date: Sun, 13 Aug 2023 13:48:03 +0200
Subject: [PATCH] disable PIE support
Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Upstream: N/A Not upstreamable
[Rebased on ntpsec-1.2.5]
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
---
wscript | 1 -
1 file changed, 1 deletion(-)
diff --git a/wscript b/wscript
index ba8939aff..bdc3a2748 100644
--- a/wscript
+++ b/wscript
@@ -291,7 +291,6 @@ def configure(ctx):
# ('w_everything', "-Weverything"), # clang
cc_test_flags = [
('PIC', '-fPIC'),
- ('PIE', '-pie -fPIE'),
# this quiets most of macOS warnings on -fpie
('unused', '-Qunused-arguments'),
# This is a useless warning on any architecture with a barrel
--
2.55.0