[ntp:security] ntp & openvms issue

Harlan Stenn stenn at nwtime.org
Thu Oct 8 19:47:23 UTC 2015


The PGP key we got from you seems to be signed with MD5, which is
deprecated.  I can't import that key.

H

On 10/8/15 11:30 AM, Sue Graves wrote:
> Hi,
> We never heard back from you. Is there a PGP key for sending encrypted
> email?
> 
> Thanks
> Sue
> 
> On 10/2/2015 10:46 AM, Harlan Stenn wrote:
>> What pgp/gpg key should I use when I encrypt the report?
>>
>> Sent from my iPhone - please excuse brevity and typos
>>
>>> On Oct 2, 2015, at 9:19 AM, HP PSRT Security Alert <security-alert at hp.com> wrote:
>>>
>>> Hello Sue,
>>>
>>> Thank you for your email.  
>>>
>>> Please email your detailed report and steps to reproduce the bug to us. 
>>>
>>> Example format:
>>>
>>>    Product Name:
>>>    Version Number:
>>>      Steps to Reproduce the issue:
>>>    Attach any screenshots or log files (if any):
>>>
>>> We will then start the investigations and let you know our feedback.
>>>
>>> Regards,
>>>
>>> HP Product Security Response Team
>>>
>>> -----Original Message-----
>>> From: Sue Graves [mailto:sgraves at nwtime.org] 
>>> Sent: Friday, October 02, 2015 9:10 AM
>>> To: HP PSRT Security Alert; emilygcole at hp.com
>>> Cc: security at ntp.org; Sue Graves-NTF; Harlan Stenn
>>> Subject: ntp & openvms issue
>>>
>>> Hi,
>>>
>>> There is possible security bug, only present in OpenVMS, in the handling of NTP.
>>> Is there someone we can talk with on the phone about this?
>>>
>>> Thanks
>>> Sue
>>> Susan Graves
>>> Harlan Stenn
>>> --
>>> Knowing the correct time isn't always important - until it is.
>>> Join Network Time Consortium http://nwtime.org/join
>>>
>>
> 

-- 
Harlan Stenn <stenn at nwtime.org>
http://networktimefoundation.org - be a member!



More information about the security mailing list