Re: [pkg-ntp-maintainers] squeeze update of ntp?

2016-05-18 Thread Antoine Beaupré
On 2016-05-18 17:20:42, Kurt Roeckx wrote: > On Wed, May 18, 2016 at 04:27:22PM -0400, Antoine Beaupré wrote: >> On 2016-05-18 13:56:37, Kurt Roeckx wrote: >> > There are 22 open, some of which are marked as non-important. Of >> > the new ones some should probably also be marked as such. >> >> I

Re: [pkg-ntp-maintainers] squeeze update of ntp?

2016-05-18 Thread Kurt Roeckx
On Wed, May 18, 2016 at 04:27:22PM -0400, Antoine Beaupré wrote: > On 2016-05-18 13:56:37, Kurt Roeckx wrote: > > There are 22 open, some of which are marked as non-important. Of > > the new ones some should probably also be marked as such. > > I did so with CVE-2015-8158 as it affects only ntpq

Re: [pkg-ntp-maintainers] squeeze update of ntp?

2016-05-18 Thread Antoine Beaupré
On 2016-05-18 13:56:37, Kurt Roeckx wrote: > There are 22 open, some of which are marked as non-important. Of > the new ones some should probably also be marked as such. I did so with CVE-2015-8158 as it affects only ntpq under very specific conditions and the impact is minor (it hangs). > I've

Re: [pkg-ntp-maintainers] squeeze update of ntp?

2016-05-18 Thread Antoine Beaupré
On 2016-05-18 13:56:37, Kurt Roeckx wrote: > On Wed, May 18, 2016 at 01:24:37PM -0400, Antoine Beaupré wrote: >> On 2016-02-13 05:49:24, Kurt Roeckx wrote: >> > On Sat, Feb 13, 2016 at 10:06:23AM +, Damyan Ivanov wrote: >> >> Hello dear maintainer(s), >> >> >> >> The Debian LTS team would like

Re: [pkg-ntp-maintainers] squeeze update of ntp?

2016-05-18 Thread Kurt Roeckx
On Wed, May 18, 2016 at 01:24:37PM -0400, Antoine Beaupré wrote: > On 2016-02-13 05:49:24, Kurt Roeckx wrote: > > On Sat, Feb 13, 2016 at 10:06:23AM +, Damyan Ivanov wrote: > >> Hello dear maintainer(s), > >> > >> The Debian LTS team would like to fix the security issues which are > >> current

Re: [pkg-ntp-maintainers] squeeze update of ntp?

2016-05-18 Thread Antoine Beaupré
On 2016-02-13 05:49:24, Kurt Roeckx wrote: > On Sat, Feb 13, 2016 at 10:06:23AM +, Damyan Ivanov wrote: >> Hello dear maintainer(s), >> >> The Debian LTS team would like to fix the security issues which are >> currently open in the Squeeze version of ntp: >> https://security-tracker.debian.org

Re: [pkg-ntp-maintainers] squeeze update of ntp?

2016-02-13 Thread Kurt Roeckx
On Sat, Feb 13, 2016 at 03:55:31PM +, Damyan Ivanov wrote: > -=| Kurt Roeckx, 13.02.2016 11:49:24 +0100 |=- > > On Sat, Feb 13, 2016 at 10:06:23AM +, Damyan Ivanov wrote: > > > Hello dear maintainer(s), > > > > > > The Debian LTS team would like to fix the security issues which are > > > c

Re: [pkg-ntp-maintainers] squeeze update of ntp?

2016-02-13 Thread Damyan Ivanov
-=| Kurt Roeckx, 13.02.2016 11:49:24 +0100 |=- > On Sat, Feb 13, 2016 at 10:06:23AM +, Damyan Ivanov wrote: > > Hello dear maintainer(s), > > > > The Debian LTS team would like to fix the security issues which are > > currently open in the Squeeze version of ntp: > > https://security-tracker.d

Re: [pkg-ntp-maintainers] squeeze update of ntp?

2016-02-13 Thread Kurt Roeckx
On Sat, Feb 13, 2016 at 10:06:23AM +, Damyan Ivanov wrote: > Hello dear maintainer(s), > > The Debian LTS team would like to fix the security issues which are > currently open in the Squeeze version of ntp: > https://security-tracker.debian.org/tracker/source-package/ntp I was under the impre