From owner-freebsd-security Thu Apr 19 16:32:12 2001 Delivered-To: freebsd-security@freebsd.org Received: from empty1.ekahuna.com (empty1.ekahuna.com [198.144.200.196]) by hub.freebsd.org (Postfix) with ESMTP id 36C1737B43C for ; Thu, 19 Apr 2001 16:32:10 -0700 (PDT) (envelope-from pjklist@ekahuna.com) Received: from pc-02 (pc02.ekahuna.com [198.144.200.197]) by empty1.ekahuna.com (Post.Office MTA v3.5.3 release 223 ID# 0-0U10L2S100V35) with ESMTP id com for ; Thu, 19 Apr 2001 16:32:09 -0700 From: "Philip J. Koenig" Organization: The Electric Kahuna Organization To: FreeBSD Security List Date: Thu, 19 Apr 2001 16:32:08 -0700 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Subject: ntpd version not updated? Reply-To: pjklist@ekahuna.com Message-ID: <3ADF1308.3067.BD4A84@localhost> X-mailer: Pegasus Mail for Win32 (v3.12c) Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Re: the recent security advisory on ntpd. It says in part that versions of ntpd prior to "ntp-4.0.99k_2" are vulnerable, and that 4.2 STABLE as of 4/6 was corrected. I just CVSup'd 4.2-STABLE (RELENG_4) as of 4/15, did make world etc., and based on the "version" command in ntpq and ntpdc, and the syslog message, I'm still running version 4.0.99b. Here's the syslog message: Apr 19 16:14:56 server ntpd[168]: ntpd 4.0.99b Sun Apr 15 09:10:45 PDT 2001 (1) Is there something I'm missing here? -- Philip J. Koenig pjklist@ekahuna.com Electric Kahuna Systems -- Computers & Communications for the New Millenium To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message