On 6/2/16, Sanjeev Gupta <[email protected]> wrote: > On Fri, Jun 3, 2016 at 2:00 AM, Daniel Franke <[email protected]> wrote: > >> The remaining, low-severity vulnerability, CVE-2016-4954 > > > This alone is worth the price of admission. > > Who is writing the announcement to LWN?
Before that I want to make sure we get the impact analysis correct. My own analysis says one thing, NTP.org's security advisory says another, and the original bug ticket (http://bugs.ntp.org/show_bug.cgi?id=3044) is slightly vague on the matter; see my comment #4 on that ticket. _______________________________________________ devel mailing list [email protected] http://lists.ntpsec.org/mailman/listinfo/devel
