Date: Mon, 10 Apr 2017 13:50:40 +0300 From: Johannes Jost Meixner <johannes@perceivon.net> To: freebsd-security@FreeBSD.org Subject: ntp vulnerabilities disclosed 2017-03-21 Message-ID: <cb4de764-0787-5570-576f-0a42fc3eed9b@perceivon.net>
next in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --okNCdA0qOcBecnK1UmAuKmR3CTht5bgDW Content-Type: multipart/mixed; boundary="xLxjku1BqEK7FAhlSoW16t1i7FAmNqLh6"; protected-headers="v1" From: Johannes Jost Meixner <johannes@perceivon.net> To: freebsd-security@FreeBSD.org Message-ID: <cb4de764-0787-5570-576f-0a42fc3eed9b@perceivon.net> Subject: ntp vulnerabilities disclosed 2017-03-21 --xLxjku1BqEK7FAhlSoW16t1i7FAmNqLh6 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable NTP publicly disclosed a list of vulnerabilities, and corresponding fixes, on March 21[1]. The patched ntp 4.2.8p10 has been imported to 12.0-CURRENT on March 23[2], but a merge from current to releng/11.0 and releng/10.3 branches seems to still be missing. Is someone working on fixing that, and if so, how long until the SA is made public? Thanks -Johannes --xLxjku1BqEK7FAhlSoW16t1i7FAmNqLh6-- --okNCdA0qOcBecnK1UmAuKmR3CTht5bgDW Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwY8kko8dNupPoLLvSWqdcGJQ1AIFAljrY4MACgkQSWqdcGJQ 1AKtlw//SCoh49wDr7c4bt/BR7hptuWbX0HqQo0g3C8Fpyk3gGkHwRKUHnD1ElIX f3ml6M4Dq8chG5UhHUlLLq7Hq6Bs9ZDnKUCYUBsjj8TuKC6Zda/DJm0sJj1IaUL0 oUmX7/Eo7Bz3o/Sy7vpK/w4/62JwDI9cI/Pe0FclQ3Jv24US18e0n8kFdDk5E3xe OdFbPEoN6RgpYqyrmfkm3DFKycmgCH94F/fjJ2W7t7mQt0daDJo78yuhdJ/Aw/QA eD/7baYZ5EtgFzRHss352W2DP/w9IhAiZ8yEoGqDAegwUoo+9YwM+Mtk4h7JZrUg i+zZkAlz3ydlx8GizqaPwPvG4gjCSiIKzvNUxEREmcQAbIZqZ6YGAYtmG0syj5pQ X3jB8fUSQpATfhiDbXEqjetmgCtciiA7ZJFUWtGGgRMO6aDm18sKvZqT1fxI/oBs u7ilbAGT9M6L9JK0dV9IynfZCpZGu7zQniLNAQI6n0nBTUsrgyPmxuyC1t+pgeMl QZkwMRsv1cn3XRHMc7/3JlZGX3rM+FJJ4I3cmYxpKIgYkR2NRueOALuByjv3I19+ Yy+3TO/TMFoVW1+0NEJkWRE+PtcXDqcN9j78xRyIqopuQAM7f+g5vfZUvHpW/xnt vQHm7UkW81Y8Qxwzgqm27BOjdUgE9Uk2uH61M4D8Bs1KfkxZIhQ= =kV8T -----END PGP SIGNATURE----- --okNCdA0qOcBecnK1UmAuKmR3CTht5bgDW--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?cb4de764-0787-5570-576f-0a42fc3eed9b>