On Thu, Oct 22, 2015 at 07:33:42PM +0200, Miroslav Lichvar wrote: > On Thu, Oct 22, 2015 at 07:27:25PM +0200, Kurt Roeckx wrote: > > On Thu, Oct 22, 2015 at 10:33:03AM +0200, Miroslav Lichvar wrote: > > > Harlan, attached is a proper fix. It applies to 4.2.6p5 and 4.2.8p3. > > > It would be good if you could make a quick 4.2.8p5 release. Maybe even > > > include the one-liner for CVE-2015-5300. > > > > That patch does not apply to 4.2.8p4, I've attached a patch that > > does. > > That won't fix the problem with symmetric associations. I'd suggest to > revert the original fix first (commit 21d57dc in the github ntp repo).
Thanks, uploading that to Debian unstable ... Kurt _______________________________________________ pool mailing list [email protected] http://lists.ntp.org/listinfo/pool
