Date: Tue, 13 Dec 2016 16:47:38 +0100 From: Dimitry Andric <dim@FreeBSD.org> To: Michelle Sullivan <michelle@sorbs.net> Cc: Xin LI <delphij@freebsd.org>, FreeBSD-STABLE Mailing List <freebsd-stable@freebsd.org> Subject: Re: CVE-2016-7434 NTP Message-ID: <2A50A786-514F-4F44-A2D4-4FD4436D74A3@FreeBSD.org> In-Reply-To: <584F5A6D.7070507@sorbs.net> References: <5848EAB6.8040909@sorbs.net> <5AA6183C-44B5-4A0E-81E8-9B50FFE087F2@FreeBSD.org> <584F5A6D.7070507@sorbs.net>
next in thread | previous in thread | raw e-mail | index | archive | help
--Apple-Mail=_D8314697-0EF4-46D6-B731-9E387C1007B0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=us-ascii On 13 Dec 2016, at 03:18, Michelle Sullivan <michelle@sorbs.net> wrote: > > Dimitry Andric wrote: >> On 08 Dec 2016, at 06:08, Michelle Sullivan <michelle@sorbs.net> wrote: >>> Are we going to get a patch for CVE-2016-7434 on FreeBSD 9.3? >> On Nov 22, in r309009, Xin Li merged ntp 4.2.8p9, which fixes this >> issue, to stable/9: >> >> https://svnweb.freebsd.org/changeset/base/309009 >> >> Unfortunately the commit message did not mention the CVE identifier. I >> can't find any corresponding security advisory either. ... > No updates needed to update system to 9.3-RELEASE-p52. > No updates are available to install. > Run '/usr/sbin/freebsd-update fetch' first. > [root@gauntlet /]# ntpd --version > ntpd 4.2.8p8-a (1) > > So no then... > > 9.3 is still so-say supported so I'm not talking about -STABLE. Well, as I mentioned, there was no Security Advisory (which is a little strange), so I didn't expect there to be any binary updates. As far as I know, binary updates are only built for Security Advisories and Errata Notices. -Dimitry --Apple-Mail=_D8314697-0EF4-46D6-B731-9E387C1007B0 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.30 iEYEARECAAYFAlhQGCYACgkQsF6jCi4glqPRfgCfbsp8WIAaP5LrUf0yNz938vyR UvYAoPhJzoXRDV2vNAmyrJKte6bXE6g9 =oYoM -----END PGP SIGNATURE----- --Apple-Mail=_D8314697-0EF4-46D6-B731-9E387C1007B0--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?2A50A786-514F-4F44-A2D4-4FD4436D74A3>