Re: NTPsec 1.2.2a released

2023-08-04 Thread James Browning via devel
> On 08/04/2023 6:35 PM PDT Fred Wright via devel wrote: > :::snip::: > > I notice that the two commits for that don't seem to be in any branch. > Having commits only "owned" by a tag and not a branch seems fragile. I do not think it is particularly fragile; I mean the garbage collector is tha

Re: NTPsec 1.2.2a released

2023-08-04 Thread Fred Wright via devel
On Fri, 4 Aug 2023, Fred Wright via devel wrote: On Fri, 4 Aug 2023, Matthew Selsky wrote: On Fri, Aug 04, 2023 at 01:47:29PM -0700, Fred Wright via devel wrote: And for that matter, what exactly is 1.2.2a, given that there's no git tag for that version? 1.2.2a is 1.2.2 + the 2 line patch

NTPsec 1.2.2a released

2023-08-04 Thread Matthew Selsky via devel
The NTPsec Project is pleased to announce the tagging of version 1.2.2a * Fix a crash in ntpd if NTS is disabled and an NTS-enabled client request (mode 3) is received. (CVE-2023-4012) #794 For other changes since the previous release, please consult the project NEWS.adoc file at https://gitlab

Re: NTPsec 1.2.2a released

2023-08-04 Thread Fred Wright via devel
On Fri, 4 Aug 2023, Matthew Selsky wrote: On Fri, Aug 04, 2023 at 01:47:29PM -0700, Fred Wright via devel wrote: And for that matter, what exactly is 1.2.2a, given that there's no git tag for that version? 1.2.2a is 1.2.2 + the 2 line patch to avoid the crash. We'll release 1.2.3 in lat

Re: NTPsec 1.2.2a released

2023-08-04 Thread Matthew Selsky via devel
On Fri, Aug 04, 2023 at 01:47:29PM -0700, Fred Wright via devel wrote: > And for that matter, what exactly is 1.2.2a, given that there's no git tag > for that version? Hi Fred, 1.2.2a is 1.2.2 + the 2 line patch to avoid the crash. We'll release 1.2.3 in late August with all of the changes in

Re: NTPsec 1.2.2a released

2023-08-04 Thread Matthew Selsky via devel
On Thu, Aug 03, 2023 at 11:38:25PM -0700, Hal Murray wrote: > Should that also go to users@ and devel@? I'll do this shortly. Thanks, -Matt ___ devel mailing list devel@ntpsec.org https://lists.ntpsec.org/mailman/listinfo/devel

Re: NTPsec 1.2.2a released

2023-08-04 Thread Fred Wright via devel
On Thu, 3 Aug 2023, Hal Murray via devel wrote: Should that also go to users@ and devel@? What fraction of people on users or devel are also on announce? And for that matter, what exactly is 1.2.2a, given that there's no git tag for that version? Fred Wright _