[OmniOS-discuss] NTP vulnerabilities in OmniOS

[Dan McDonald]

> On Jan 27, 2016, at 9:46 AM, Bob Friesenhahn <bfriesen at simple.dallas.tx.us> wrote:
> 
> NTP ntp-4.2.8p6 was released on 19 January 2016 (OmniOS is at 4.2.8p5).  It addresses these security issues:
> 
> http://support.ntp.org/bin/view/Main/SecurityNotice#January_2016_NTP_4_2_8p6_Securit
> 
> For some reason the xntp announcements list still fails to deliver any release announcements since April of last year.

And I didn't see this on OSS-Security either, but that is a higher-traffic list.

It'll come later this week, alongside OpenSSL 1.0.2f if not sooner.

Dan