Hi. Are there plans on updating contrib/ntp to the latest version? There was at least one security fix (and others at earlier versions): +(4.2.4p8) 2009/12/08 Released by Harlan Stenn <stenn@ntp.org> + +* [Sec 1331] DoS with mode 7 packets - CVE-2009-3563. + NetBSD already done that on Dec/9 (w/ MFC to 4.0.x). -- wbr, pluknet
According to pluknet:>Are there plans on updating contrib/ntp to the latest version?Yes. It is in the works. -- Ollivier ROBERT -=- FreeBSD: The Power to Serve! -=- roberto@keltia.freenix.fr In memoriam to Ondine : http://ondine.keltia.net/
According to Ollivier Robert:> Yes. It is in the works.For those not following the commit logs, I updated ntpd to 4.2.4p8 in head. For the release branches, a patch will be released (as we do not update whole programs in these). After two weeks, it will be merged to stable/8. 4.2.6 (or .7, whichever ntp-stable is) will follow soon. -- Ollivier ROBERT -=- FreeBSD: The Power to Serve! -=- roberto@keltia.freenix.fr In memoriam to Ondine : http://ondine.keltia.net/