ttttt 195 Posted 2014-12-19 18:41:37 Share Posted 2014-12-19 18:41:37 http://support.ntp.org/bin/view/Main/SecurityNotice#Buffer_overflow_in_ctl_putdata https://access.redhat.com/security/cve/CVE-2014-9295 Слава говнокоду В общем обновляйтесь. Link to post Share on other sites
ttttt 195 Posted 2014-12-19 22:51:15 Author Share Posted 2014-12-19 22:51:15 (edited) http://www.opennet.ru/opennews/art.shtml?num=41309 Рекомендую всем вырубить ntpd до обновления (если не делали сами), скоро начнут выходить во всех дистрах. Edited 2014-12-19 22:56:24 by ttttt Link to post Share on other sites
Ajar 93 Posted 2014-12-20 10:30:49 Share Posted 2014-12-20 10:30:49 опять Link to post Share on other sites
l1ght 377 Posted 2014-12-20 11:33:45 Share Posted 2014-12-20 11:33:45 В мене openntpd, схоже що не вразливий до цього Прийнанні якщо вірити pkg audit. Link to post Share on other sites
ttttt 195 Posted 2014-12-20 19:38:41 Author Share Posted 2014-12-20 19:38:41 В мене openntpd, схоже що не вразливий до цього http://www.mail-archive.com/tech@openbsd.org/msg21729.html "Around 10 years ago it was written by Henning, at my request because the ntpd source code scared the hell out of us. At the time communications with the ntp team showed they had little interest in removing unused functionality from the ntp.org code, or any help with our form of source code audit." Link to post Share on other sites
l1ght 377 Posted 2014-12-20 19:48:41 Share Posted 2014-12-20 19:48:41 В мене openntpd, схоже що не вразливий до цього http://www.mail-archive.com/tech@openbsd.org/msg21729.html "Around 10 years ago it was written by Henning, at my request because the ntpd source code scared the hell out of us. At the time communications with the ntp team showed they had little interest in removing unused functionality from the ntp.org code, or any help with our form of source code audit." openntpd is not vulnerable. Треба ще було оцей рядок додати. Link to post Share on other sites
ttttt 195 Posted 2014-12-20 19:52:32 Author Share Posted 2014-12-20 19:52:32 Дык это и так понятно, это ж другой софт. Link to post Share on other sites
ttttt 195 Posted 2014-12-24 05:10:24 Author Share Posted 2014-12-24 05:10:24 FreeBSD обновили ntpd во всех релизах, дергайте freebsd-update. Link to post Share on other sites
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now