Concerning the ntp-4.2.8p8 security fixes

[Eric S. Raymond]

Daniel Franke <dfoxfranke at gmail.com>:
> On 6/2/16, Sanjeev Gupta <ghane0 at gmail.com> wrote:
> > On Fri, Jun 3, 2016 at 2:00 AM, Daniel Franke <dfoxfranke at gmail.com> wrote:
> >
> >> The remaining, low-severity vulnerability, CVE-2016-4954
> >
> >
> > This alone is worth the price of admission.
> >
> > Who is writing the announcement to LWN?
> 
> Before that I want to make sure we get the impact analysis correct. My
> own analysis says one thing, NTP.org's security advisory says another,
> and the original bug ticket (http://bugs.ntp.org/show_bug.cgi?id=3044)
> is slightly vague on the matter; see my comment #4 on that ticket.

I will await your report.
-- 
		<a href="http://www.catb.org/~esr/">Eric S. Raymond</a>