On Thu, Oct 22, 2015 at 08:46:32PM CEST, Kurt Roeckx <[email protected]> said: > On Thu, Oct 22, 2015 at 07:33:42PM +0200, Miroslav Lichvar wrote: > > On Thu, Oct 22, 2015 at 07:27:25PM +0200, Kurt Roeckx wrote: > > > On Thu, Oct 22, 2015 at 10:33:03AM +0200, Miroslav Lichvar wrote: > > > > Harlan, attached is a proper fix. It applies to 4.2.6p5 and 4.2.8p3. > > > > It would be good if you could make a quick 4.2.8p5 release. Maybe even > > > > include the one-liner for CVE-2015-5300. > > > > > > That patch does not apply to 4.2.8p4, I've attached a patch that > > > does. > > > > That won't fix the problem with symmetric associations. I'd suggest to > > revert the original fix first (commit 21d57dc in the github ntp repo). > > Thanks, uploading that to Debian unstable ...
Speaking of debian : I have a server in stable (with backports) in the pool. Should I add some other repository to be sure to get up to date ntpd package ? _______________________________________________ pool mailing list [email protected] http://lists.ntp.org/listinfo/pool
