Date: Mon, 22 Dec 2014 11:06:59 +0100 From: Steve Clement <steve@localhost.lu> To: Winfried Neessen <neessen@cleverbridge.com> Cc: freebsd-security@freebsd.org Subject: Re: ntpd vulnerabilities Message-ID: <B6AF154A-FE22-4357-9031-91D661FD7E57@localhost.lu> In-Reply-To: <252350272.1812596.1419241828431.JavaMail.zimbra@cleverbridge.com> References: <252350272.1812596.1419241828431.JavaMail.zimbra@cleverbridge.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--Apple-Mail=_52A5F12D-142B-40A2-BC85-7A34103D94F9 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hej, Currently on 10.0 I run: FreeBSD tart 10.0-RELEASE-p14 FreeBSD 10.0-RELEASE-p14 #2 r265783M: Thu = Dec 18 11:14:03 CET 2014 root@tart:/usr/obj/usr/src/sys/TART i386 (ntpd -? | head -1) ntpd - NTP daemon program - Ver. 4.2.4p8 If someone could share a diff between ntpd 4.2.7 and 4.2.8 would be a = good start. Some more technical info can be found here: http://circl.lu/pub/tr-29/ = <http://circl.lu/pub/tr-29/>; As soon as there are FreeBSD relevant information we will include it. cheers, Steve > On 22 Dec 2014, at 10:50, Winfried Neessen <neessen@cleverbridge.com> = wrote: >=20 > Hi everyone, >=20 > there has been a security advisory for several vulnerabilities in = ntpd. Is FreeBSD > affected by this? According to http://www.kb.cert.org/vuls/id/852879 = <http://www.kb.cert.org/vuls/id/852879>; OpenBSD is > not affected, but I guess that's due to the fact, that they have = OpenNTPd. The > status for FreeBSD on that page is still "unknown". --Apple-Mail=_52A5F12D-142B-40A2-BC85-7A34103D94F9 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJUl+1DAAoJEGmiD1Cb5K7pS4QP/0AodJJsDhpY+376j1/F1t80 //veC5sDIyeDf86JnDSLLSVpCHnKQe95Ohg/mM+4Mey3T/6lpakZPmaoM1Y+FXH8 BiPFD2nipsj+qMzmLOmAMtgbnW2ZUCTHKj0cVcWWbCHPpo22jK647ya6FfgmCOFA UdgOnianFyL+YLbUYo0LA6M7XSts0r62RcDmlg1s1r9zcsRua6FCKXoI59+SeVva myJwJEv30KczUiifxGrQLMlnl0jGXQJwMhIGTJYdfNMYwk2XpONX1oLk8fk/QIc3 Z0fQYEq/Zl16Hhd2vRDlJh8xcVeM9vrI7+b9HqZAshhOuu1T1VDbq8xIRTfpXfCI q09m03qGCGrjRq9UIxrDFa8dgrAngh1eYiVXSKDXCCLLXmufaB1I53WD8aOuG/qY JCuSFtrGoiIBb+thkfDISme2DTQTKpVz9nHHj7rxAvo6gK6v4QFYRNdhwEC4sFSM Myrsh7vwo5SrNqOy/oiDjfXy+N5IVj+Y0fhGbEnhmOZa51q/Hvu/ZUNrgy0mMIGr HOSejQX/oUPoBitq5t98zGaKNJsosLrKaHQxr1/IkgzYRBuwVu2wDsdbzrjGvj+4 qj7jHESHPI9UIKiR8BuQldZwqPPBmGiPyudjClQcs5efKCz0l+qL19PPc5i2lD7+ 6/9mxUahUQRx6q8fp3HZ =piOm -----END PGP SIGNATURE----- --Apple-Mail=_52A5F12D-142B-40A2-BC85-7A34103D94F9--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?B6AF154A-FE22-4357-9031-91D661FD7E57>