[arch-dev-public] Upgrading to ntp-dev
Hi all, The ntp-stable branch last saw a release in 2011. If there are no objections, I'll switch our ntp package to the ntp-dev branch, where all development effort (new features, bug fixes) has happened since. Upstream considers ntp-dev semi-stable (with unstable being the daily snapshots). What prompted me to do this is the recent ntp-based DoS [1]; it's currently only fixed in ntp-dev [2] although we are currently fine with the default ntp.conf shipped in our package because of the "noquery" option. [1] http://www.bbc.co.uk/news/technology-26136774 [2] http://support.ntp.org/bin/view/Main/SecurityNotice#DRDoS_Amplification_Atta... Comments welcome. -- Gaetan
[2014-02-11 10:30:48 -1000] Gaetan Bisson:
If there are no objections, I'll switch our ntp package to the ntp-dev branch,
I might have spoken a little too quickly here: I'm having trouble talking to a running ntpd using ntpdc (which is fine with ntp-stable)... Anyhow, I'll be on a remote island next week and be back Monday, Feb 24. So we'll stick with ntp-stable for the time being, and you should as usual feel free to fix anything that breaks while I'm gone. Cheers. -- Gaetan
[2014-02-11 10:30:48 -1000] Gaetan Bisson:
The ntp-stable branch last saw a release in 2011. If there are no objections, I'll switch our ntp package to the ntp-dev branch, where all development effort (new features, bug fixes) has happened since.
I felt we had reached a good enough consensus after those three months without any objection, so I have pushed this update to [testing]. There has been a few good feature changes upstream (such as ntpdc being deprecated in favor of ntpq) but their impact is minimal to the average user so I do not believe an announcement is warranted. Cheers. -- Gaetan
participants (1)
-
Gaetan Bisson