<div dir="auto">This is a security bug and needs a point release and a CVE.</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Oct 29, 2019, 05:06 Hal Murray via devel <<a href="mailto:devel@ntpsec.org">devel@ntpsec.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
Announcement below.<br>
<br>
It triggered a bug. When copying the hostname out of the NTS-KE server <br>
response, I forgot to add a NUL. I assume we tested that code. I guess we <br>
were lucky.<br>
<br>
I just pushed a fix.<br>
<br>
--------<br>
<br>
Subject: [Ntp] NTS enabled NTP service up and running at Netnod<br>
From: Patrik Fältström <paf=<a href="mailto:40frobbit.se@dmarc.ietf.org" target="_blank" rel="noreferrer">40frobbit.se@dmarc.ietf.org</a>><br>
Date: Tue, 29 Oct 2019 06:28:41 +0100<br>
To: <a href="mailto:ntp@ietf.org" target="_blank" rel="noreferrer">ntp@ietf.org</a><br>
<br>
Hi,<br>
<br>
This is slightly off topic for the IETF WG, but as people that are implem=<br>
enting NTS enabled NTP is hanging around here, I want to send a notice th=<br>
at we at Netnod have launched an NTS enabled NTP service.<br>
<br>
<<a href="https://www.netnod.se/time-and-frequency/netnod-launch-one-of-the-first-=nts-enabled-time-services-in-the-world" rel="noreferrer noreferrer" target="_blank">https://www.netnod.se/time-and-frequency/netnod-launch-one-of-the-first-=<br>
nts-enabled-time-services-in-the-world</a>><br>
<br>
We are very happy to have reached this far.<br>
<br>
Instrumental people for this are the ones you all know: Christer, Ragge, =<br>
Marcus and MC. To be added are all friends that have participated in the =<br>
hackatons on the client side. Specifically Daniel Lublin and Martin Samue=<br>
lsson.<br>
<br>
And you in this group that have worked together to get the NTS specificat=<br>
ion this far down the road. Now we "just" have a few steps to go.<br>
<br>
Regards, Patrik<br>
<br>
<br>
-- <br>
These are my opinions. I hate spam.<br>
<br>
<br>
<br>
_______________________________________________<br>
devel mailing list<br>
<a href="mailto:devel@ntpsec.org" target="_blank" rel="noreferrer">devel@ntpsec.org</a><br>
<a href="http://lists.ntpsec.org/mailman/listinfo/devel" rel="noreferrer noreferrer" target="_blank">http://lists.ntpsec.org/mailman/listinfo/devel</a><br>
</blockquote></div>