Bug#958027: CVE-2020-11868 affecting ntpsec?

2020-04-20 Thread Moritz Muehlenhoff
On Mon, Apr 20, 2020 at 11:39:14AM -0500, Richard Laager wrote: > forwarded 958027 https://gitlab.com/NTPsec/ntpsec/issues/651 > > Two key upstream developers have said this does not affect NTPsec. Thanks, I'll update the Debian Security Tracker. Cheers, Moritz

Bug#958027: CVE-2020-11868 affecting ntpsec?

2020-04-18 Thread Moritz Mühlenhoff
On Fri, Apr 17, 2020 at 06:33:51PM -0500, Richard Laager wrote: > On 4/17/20 10:02 AM, Moritz Muehlenhoff wrote: > > CVE-2020-11868 was assigned for NTP, does this also affect ntpsec in some > > way? > > Thanks for letting me know. I don't feel qualified to answer that. That > said, the code

Bug#958027: CVE-2020-11868 affecting ntpsec?

2020-04-17 Thread Richard Laager
On 4/17/20 10:02 AM, Moritz Muehlenhoff wrote: > CVE-2020-11868 was assigned for NTP, does this also affect ntpsec in some way? Thanks for letting me know. I don't feel qualified to answer that. That said, the code there is very similar, so NTPsec might very well be affected. I've forwarded this

Bug#958027: CVE-2020-11868 affecting ntpsec?

2020-04-17 Thread Moritz Muehlenhoff
Source: ntpsec Severity: important Tags: security CVE-2020-11868 was assigned for NTP, does this also affect ntpsec in some way? http://support.ntp.org/bin/view/Main/NtpBug3592 http://bugs.ntp.org/3592 Cheers, Moritz