touch-packages team mailing list archive

[Richard Laager <rlaager@xxxxxxxxxx>]

Public bug reported:

[Title copied from Debian bug, which was not filed by me. Description
below is mine.]

If an NTP client sends a request with a source port less than 123, the
packet is silently ignored by ntpd. This is occurring in our environment
due to NAT.

Attached is the patch already accepted upstream which fixes the issue.
I've verified it fixes the problem. Debian has been ignoring this patch
for almost 3 years. Can we get this in Ubuntu please?

** Affects: ntp
     Importance: Unknown
         Status: Unknown

** Affects: ntp (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: ntp (Debian)
     Importance: Unknown
         Status: Unknown

** Patch added: "Patch from upstream, made suitable for debian/patches"
   https://bugs.launchpad.net/bugs/1479652/+attachment/4436105/+files/udp-ports-under-123.patch

** Bug watch added: bugs.ntp.org/ #2174
   http://bugs.ntp.org/show_bug.cgi?id=2174

** Also affects: ntp via
   http://bugs.ntp.org/show_bug.cgi?id=2174
   Importance: Unknown
       Status: Unknown

** Bug watch added: Debian Bug tracker #691412
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=691412

** Also affects: ntp (Debian) via
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=691412
   Importance: Unknown
       Status: Unknown

** Description changed:

  [Title copied from Debian bug, which was not filed by me. Description
  below is mine.]
  
  If an NTP client sends a request with a source port less than 123, the
  packet is silently ignored by ntpd. This is occurring in our environment
  due to NAT.
  
- Attached is the patch from upstream which fixes the issue. I've verified
- it fixes the problem. Debian has been ignoring this patch for almost 3
- years. Can we get this in Ubuntu please?
+ Attached is the patch already accepted upstream which fixes the issue.
+ I've verified it fixes the problem. Debian has been ignoring this patch
+ for almost 3 years. Can we get this in Ubuntu please?

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ntp in Ubuntu.
https://bugs.launchpad.net/bugs/1479652

Title:
  [patch] ntpd rejects source UDP ports less than 123 as bogus

Status in NTP:
  Unknown
Status in ntp package in Ubuntu:
  New
Status in ntp package in Debian:
  Unknown

Bug description:
  [Title copied from Debian bug, which was not filed by me. Description
  below is mine.]

  If an NTP client sends a request with a source port less than 123, the
  packet is silently ignored by ntpd. This is occurring in our
  environment due to NAT.

  Attached is the patch already accepted upstream which fixes the issue.
  I've verified it fixes the problem. Debian has been ignoring this
  patch for almost 3 years. Can we get this in Ubuntu please?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ntp/+bug/1479652/+subscriptions