« previous next »
Pages: [1]   Go Down

Author Topic: ntp version  (Read 1770 times)

0 Members and 1 Guest are viewing this topic.

November 07, 2015, 01:09:02 am Reply #2

Offline rnglab

  • Full Member
  • ***
  • Posts: 171
    • View Profile
  • BitShares: rnglab
Re: ntp version
As Bhuz noted, Ubuntu released the respective security patches:
http://www.ubuntu.com/usn/usn-2783-1/

As well as Debian:
http://metadata.ftp-master.debian.org/changelogs//main/n/ntp/ntp_4.2.6.p5+dfsg-7+deb8u1_changelog

So a package upgrade should be enough.
Don't know why both OSs stay on version 4.2.6 though.

Logged
November 06, 2015, 11:08:58 pm Reply #1

Offline rnglab

  • Full Member
  • ***
  • Posts: 171
    • View Profile
  • BitShares: rnglab
ntp version
ntp packages for debian and ubuntu are seriously outdated.

http://www.cs.bu.edu/~goldbe/papers/NTPattack.pdf

http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities

We should all build last ntp version from source (4.2.8p4).

Code: [Select]
ntpd --version
ntpd 4.2.8p4
Logged
Pages: [1]   Go Up
« previous next »
 

Page created in 0.202 seconds with 25 queries.