Re: CVE-2016-7434 NTP

2016-12-15 Thread Michelle Sullivan
Xin LI wrote: We plan to issue an EN to update the base system ntp to 4.2.8p9. The high impact issue is Windows only by the way. I don't think I'm even impacted - but $security team are going nuts about getting patched on all systems :/ Michelle __

Re: CVE-2016-7434 NTP

2016-12-13 Thread Xin LI
We plan to issue an EN to update the base system ntp to 4.2.8p9. The high impact issue is Windows only by the way. Cheers, On Mon, Dec 12, 2016 at 6:18 PM, Michelle Sullivan wrote: > Dimitry Andric wrote: >> >> On 08 Dec 2016, at 06:08, Michelle Sullivan wrote: >>> >>> Are we going to get a pa

Re: CVE-2016-7434 NTP

2016-12-13 Thread Dimitry Andric
On 13 Dec 2016, at 03:18, Michelle Sullivan wrote: > > Dimitry Andric wrote: >> On 08 Dec 2016, at 06:08, Michelle Sullivan wrote: >>> Are we going to get a patch for CVE-2016-7434 on FreeBSD 9.3? >> On Nov 22, in r309009, Xin Li merged ntp 4.2.8p9, which fixes this >> issue, to stable/9: >> >>

Re: CVE-2016-7434 NTP

2016-12-12 Thread Michelle Sullivan
Dimitry Andric wrote: On 08 Dec 2016, at 06:08, Michelle Sullivan wrote: Are we going to get a patch for CVE-2016-7434 on FreeBSD 9.3? On Nov 22, in r309009, Xin Li merged ntp 4.2.8p9, which fixes this issue, to stable/9: https://svnweb.freebsd.org/changeset/base/309009 Unfortunately the com

Re: CVE-2016-7434 NTP

2016-12-11 Thread Dimitry Andric
On 08 Dec 2016, at 06:08, Michelle Sullivan wrote: > > Are we going to get a patch for CVE-2016-7434 on FreeBSD 9.3? On Nov 22, in r309009, Xin Li merged ntp 4.2.8p9, which fixes this issue, to stable/9: https://svnweb.freebsd.org/changeset/base/309009 Unfortunately the commit message did not