[ntp:security] [Bug 2655] Multiple vulnerabilities in ntpd

bugzilla-daemon at ntp.org bugzilla-daemon at ntp.org
Mon Nov 3 00:21:57 UTC 2014


http://bugs.ntp.org/show_bug.cgi?id=2655

--- Comment #7 from Harlan Stenn <stenn at ntp.org> 2014-11-03 00:21:57 UTC ---
(In reply to comment #4)

> 2) non-cryptographic random number generator with weak seed
>  * util/ntp-keygen.c:724 <gen_md5> (weak symmetric keys)
>  fix: use OS provided random numbers for crypto

This issue is now being tracked in bug 2666.

-- 
Configure bugmail: http://bugs.ntp.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.


More information about the security mailing list