Re: wheezy update of ntp? (was: squeeze update of ntp?)

2016-06-01 Thread Kurt Roeckx
On Wed, Jun 01, 2016 at 07:23:22AM +0200, Santiago Ruano Rincón wrote: > > I have picked your patches (I hope all of them) from the svn to build a > test package, and have also taken a look to remaining issues. I have > only could "backport" the fix for CVE-2016-1551, the refclock >

Re: wheezy update of ntp? (was: squeeze update of ntp?)

2016-05-31 Thread Santiago Ruano Rincón
Hi Kurt, El 18/05/16 a las 23:20, Kurt Roeckx escribió: > On Wed, May 18, 2016 at 04:27:22PM -0400, Antoine Beaupré wrote: > > On 2016-05-18 13:56:37, Kurt Roeckx wrote: > > > There are 22 open, some of which are marked as non-important. Of > > > the new ones some should probably also be marked

Re: [pkg-ntp-maintainers] squeeze update of ntp?

2016-05-18 Thread Antoine Beaupré
On 2016-05-18 13:56:37, Kurt Roeckx wrote: > There are 22 open, some of which are marked as non-important. Of > the new ones some should probably also be marked as such. I did so with CVE-2015-8158 as it affects only ntpq under very specific conditions and the impact is minor (it hangs). > I've

Re: [pkg-ntp-maintainers] squeeze update of ntp?

2016-05-18 Thread Kurt Roeckx
On Wed, May 18, 2016 at 01:24:37PM -0400, Antoine Beaupré wrote: > On 2016-02-13 05:49:24, Kurt Roeckx wrote: > > On Sat, Feb 13, 2016 at 10:06:23AM +, Damyan Ivanov wrote: > >> Hello dear maintainer(s), > >> > >> The Debian LTS team would like to fix the security issues which are > >>

squeeze update of ntp?

2016-02-13 Thread Damyan Ivanov
Hello dear maintainer(s), The Debian LTS team would like to fix the security issues which are currently open in the Squeeze version of ntp: https://security-tracker.debian.org/tracker/source-package/ntp Would you like to take care of this yourself? Note that all of the squeeze-relevant issues

Re: [pkg-ntp-maintainers] squeeze update of ntp?

2016-02-13 Thread Kurt Roeckx
On Sat, Feb 13, 2016 at 10:06:23AM +, Damyan Ivanov wrote: > Hello dear maintainer(s), > > The Debian LTS team would like to fix the security issues which are > currently open in the Squeeze version of ntp: > https://security-tracker.debian.org/tracker/source-package/ntp I was under the

Re: [pkg-ntp-maintainers] squeeze update of ntp?

2016-02-13 Thread Damyan Ivanov
-=| Kurt Roeckx, 13.02.2016 11:49:24 +0100 |=- > On Sat, Feb 13, 2016 at 10:06:23AM +, Damyan Ivanov wrote: > > Hello dear maintainer(s), > > > > The Debian LTS team would like to fix the security issues which are > > currently open in the Squeeze version of ntp: > >

Re: [pkg-ntp-maintainers] squeeze update of ntp?

2016-02-13 Thread Kurt Roeckx
On Sat, Feb 13, 2016 at 03:55:31PM +, Damyan Ivanov wrote: > -=| Kurt Roeckx, 13.02.2016 11:49:24 +0100 |=- > > On Sat, Feb 13, 2016 at 10:06:23AM +, Damyan Ivanov wrote: > > > Hello dear maintainer(s), > > > > > > The Debian LTS team would like to fix the security issues which are > > >

squeeze update of ntp?

2015-04-10 Thread Raphael Hertzog
Hello dear maintainer(s), the Debian LTS team would like to fix the security issues which are currently open in the Squeeze version of ntp: https://security-tracker.debian.org/tracker/CVE-2015-1798 https://security-tracker.debian.org/tracker/CVE-2015-1799

Re: squeeze update of ntp?

2015-04-10 Thread Kurt Roeckx
On Fri, Apr 10, 2015 at 11:05:47PM +0200, Raphael Hertzog wrote: Hello dear maintainer(s), the Debian LTS team would like to fix the security issues which are currently open in the Squeeze version of ntp: https://security-tracker.debian.org/tracker/CVE-2015-1798

Re: squeeze update of ntp?

2015-04-10 Thread Raphael Hertzog
Hi, On Fri, 10 Apr 2015, Kurt Roeckx wrote: On Fri, Apr 10, 2015 at 11:05:47PM +0200, Raphael Hertzog wrote: Would you like to take care of this yourself? We are still understaffed so any help is always highly appreciated. You really don't have patience do you? I do, but contacting

Re: squeeze update of ntp?

2015-04-10 Thread Kurt Roeckx
On Fri, Apr 10, 2015 at 11:33:22PM +0200, Raphael Hertzog wrote: Hi, On Fri, 10 Apr 2015, Kurt Roeckx wrote: On Fri, Apr 10, 2015 at 11:05:47PM +0200, Raphael Hertzog wrote: Would you like to take care of this yourself? We are still understaffed so any help is always highly

Re: squeeze update of ntp?

2015-04-10 Thread Raphael Hertzog
On Fri, 10 Apr 2015, Kurt Roeckx wrote: On Fri, Apr 10, 2015 at 11:33:22PM +0200, Raphael Hertzog wrote: I do, but contacting maintainers is just part of the workflow of CVE triage we defined for Debian LTS. Sorry if this mail bothered you. Is there a way to do it that would have been