Re: net/ntp CVE

2017-03-26 Thread Alexander Bluhm
On Thu, Mar 23, 2017 at 11:09:37PM +0100, Alexander Bluhm wrote: > Update ntp to 4.2.8p10. This fixes: anyone? If noone objects I will commit this. bluhm > CVE-2016-9042, CVE-2017-6451, CVE-2017-6452, CVE-2017-6455, > CVE-2017-6458, CVE-2017-6459, CVE-2017-6460, CVE-2017-6462, > CVE-2017-6463,

net/ntp CVE

2017-03-23 Thread Alexander Bluhm
Hi, Update ntp to 4.2.8p10. This fixes: CVE-2016-9042, CVE-2017-6451, CVE-2017-6452, CVE-2017-6455, CVE-2017-6458, CVE-2017-6459, CVE-2017-6460, CVE-2017-6462, CVE-2017-6463, CVE-2017-6464 They introduced a bunch of #ifdef OPENSSL_VERSION_NUMBER < 0x1010L, I have added a defined(LIBRESSL_VER