Re: NTP vulnerability

2014-12-23 Thread Patrick O'Callaghan
On Tue, 2014-12-23 at 03:54 +0100, Ralf Corsepius wrote: > On 12/22/2014 01:50 PM, Patrick O'Callaghan wrote: > > On Mon, 2014-12-22 at 04:48 +0800, Ed Greshko wrote: > >> On 12/22/14 02:46, Aaron Gray wrote: > >>> There are no ntp or ntpd or systemd-timesyncd packages on F20 ! > >> > >> The defaul

Re: NTP vulnerability

2014-12-22 Thread Ralf Corsepius
On 12/22/2014 01:50 PM, Patrick O'Callaghan wrote: On Mon, 2014-12-22 at 04:48 +0800, Ed Greshko wrote: On 12/22/14 02:46, Aaron Gray wrote: There are no ntp or ntpd or systemd-timesyncd packages on F20 ! The default time sync package is now chrony. ntp is available in the F20 repos. AFAI

Re: NTP vulnerability

2014-12-22 Thread Patrick O'Callaghan
On Mon, 2014-12-22 at 21:32 +0800, Ed Greshko wrote: > On 12/22/14 20:50, Patrick O'Callaghan wrote: > > On Mon, 2014-12-22 at 04:48 +0800, Ed Greshko wrote: > >> On 12/22/14 02:46, Aaron Gray wrote: > >>> There are no ntp or ntpd or systemd-timesyncd packages on F20 ! > >> The default time sync pa

Re: NTP vulnerability

2014-12-22 Thread Lars E. Pettersson
On 12/21/14 19:43, Aaron Gray wrote: It should be 4.2.8 now as there are new vulnerabilities ! The following updates was submitted for testing at 2014-12-19. For F19 in updates-testing ntp-4.2.6p5-13.fc19 For F20 in updates-testing ntp-4.2.6p5-19.fc20 For F21 in updates testing ntp-4.2.6p5-2

Re: NTP vulnerability

2014-12-22 Thread Tom Horsley
On Mon, 22 Dec 2014 11:19:11 -0500 sean darcy wrote: > How do you move to chrony? Disable ntp and enable chrony. -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http:

Re: NTP vulnerability

2014-12-22 Thread sean darcy
On 12/22/2014 08:32 AM, Ed Greshko wrote: On 12/22/14 20:50, Patrick O'Callaghan wrote: On Mon, 2014-12-22 at 04:48 +0800, Ed Greshko wrote: On 12/22/14 02:46, Aaron Gray wrote: There are no ntp or ntpd or systemd-timesyncd packages on F20 ! The default time sync package is now chrony. ntp i

Re: NTP vulnerability

2014-12-22 Thread Ed Greshko
On 12/22/14 20:50, Patrick O'Callaghan wrote: > On Mon, 2014-12-22 at 04:48 +0800, Ed Greshko wrote: >> On 12/22/14 02:46, Aaron Gray wrote: >>> There are no ntp or ntpd or systemd-timesyncd packages on F20 ! >> The default time sync package is now chrony. >> >> ntp is available in the F20 repos. >

Re: NTP vulnerability

2014-12-22 Thread Patrick O'Callaghan
On Mon, 2014-12-22 at 04:48 +0800, Ed Greshko wrote: > On 12/22/14 02:46, Aaron Gray wrote: > > There are no ntp or ntpd or systemd-timesyncd packages on F20 ! > > The default time sync package is now chrony. > > ntp is available in the F20 repos. > AFAIK chrony still connects to NTP servers, h

Re: NTP vulnerability

2014-12-21 Thread Aaron Gray
Cheers ! On 21 December 2014 at 20:48, Ed Greshko wrote: > On 12/22/14 02:46, Aaron Gray wrote: >> There are no ntp or ntpd or systemd-timesyncd packages on F20 ! > > The default time sync package is now chrony. > > ntp is available in the F20 repos. > > -- > If you can't laugh at yourself, othe

Re: NTP vulnerability

2014-12-21 Thread Ed Greshko
On 12/22/14 02:46, Aaron Gray wrote: > There are no ntp or ntpd or systemd-timesyncd packages on F20 ! The default time sync package is now chrony. ntp is available in the F20 repos. -- If you can't laugh at yourself, others will gladly oblige. -- users mailing list users@lists.fedoraproject.o

Re: NTP vulnerability

2014-12-21 Thread Aaron Gray
ote: >>> >>> Hi, >>> >>> Whats going on with Fedora and the NTP vulnerability ? >>> >>> Both of my F20 machines don't seem to have ntp installed. >> >> >> What surprises me more, is seeing a bugfix update addressing this issue >

Re: NTP vulnerability

2014-12-21 Thread Aaron Gray
It should be 4.2.8 now as there are new vulnerabilities ! On 21 December 2014 at 18:33, Ralf Corsepius wrote: > On 12/21/2014 07:24 PM, Aaron Gray wrote: >> >> Hi, >> >> Whats going on with Fedora and the NTP vulnerability ? >> >> Both of my F20 ma

Re: NTP vulnerability

2014-12-21 Thread Ralf Corsepius
On 12/21/2014 07:24 PM, Aaron Gray wrote: Hi, Whats going on with Fedora and the NTP vulnerability ? Both of my F20 machines don't seem to have ntp installed. What surprises me more, is seeing a bugfix update addressing this issue (ntp-4.2.6p5-25) pending in testing for f20, but not fo

NTP vulnerability

2014-12-21 Thread Aaron Gray
Hi, Whats going on with Fedora and the NTP vulnerability ? Both of my F20 machines don't seem to have ntp installed. Many thanks in advance, Aaron -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/ma