From owner-freebsd-security@FreeBSD.ORG  Tue Dec 23 17:10:38 2014
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 90C342CF
 for <freebsd-security@freebsd.org>; Tue, 23 Dec 2014 17:10:38 +0000 (UTC)
Received: from keltia.net (aran.keltia.net [88.191.250.24])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 54E0720EE
 for <freebsd-security@freebsd.org>; Tue, 23 Dec 2014 17:10:37 +0000 (UTC)
Received: from lonrach-2.local (foret.keltia.net [78.232.116.160])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (No client certificate requested) (Authenticated sender: roberto)
 by keltia.net (Postfix) with ESMTPSA id 31CA2529E
 for <freebsd-security@freebsd.org>; Tue, 23 Dec 2014 18:10:35 +0100 (CET)
Date: Tue, 23 Dec 2014 18:10:33 +0100
From: Ollivier Robert <roberto@keltia.freenix.fr>
To: freebsd-security@freebsd.org
Subject: Re: ntpd vulnerabilities
Message-ID: <20141223171033.GI14881@lonrach-2.local>
References: <252350272.1812596.1419241828431.JavaMail.zimbra@cleverbridge.com>
 <86a92fzmls.fsf@nine.des.no>
 <CA+QLa9Du5dZbF-FzEX6Z5cA4m=rTo+ZiEgzuKN5f8xquVExwXg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <CA+QLa9Du5dZbF-FzEX6Z5cA4m=rTo+ZiEgzuKN5f8xquVExwXg@mail.gmail.com>
X-Operating-System: MacOS X / MBP 4,1 - FreeBSD 8.0 / T3500-E5520 Nehalem
User-Agent: Mutt/1.5.23 (2014-03-12)
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: "Security issues \[members-only posting\]"
 <freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security/>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 23 Dec 2014 17:10:38 -0000

According to Robert Simmons:
> Will 4.2.8 be pulled into CURRENT eventually, or is the plan to
> replace it entirely with ntimed?

It is being worked on, import is already done in /vendor/ntp with two more patches (nothing to do with security, just compatibility).  The usr.sbin bits are being worked on.

-- 
Ollivier ROBERT -=- FreeBSD: The Power to Serve! -=- roberto@keltia.freenix.fr
In memoriam to Ondine : http://ondine.keltia.net/