Re: [Evergreen] Missing securityfixes for ntpd

2016-05-04 Thread Marcus Meissner
On Wed, May 04, 2016 at 09:20:08AM +0200, Wolfgang Rosenauer wrote:
> Hi,
> 
> Am 04.05.2016 um 06:41 schrieb Ronny Peine:
> > Hello Evergreen-Team,
> > 
> > as I can see in https://bugzilla.suse.com/show_bug.cgi?id=952611 most
> > likely all of the lately securityfixes for ntpd are missing in openSUSE
> > 13.1 (since Mai 2015). Would it be possible to maybe have the ntpd
> > version from openSUSE Leap 42.1?
> 
> We try to avoid updates if not really required from a security
> perspective or because of critical issues.
> 
> I'm wondering which security fixes you are referring to? From what I can
> see is that the 13.1 version is on par with the 13.2 version security wise.
> Are you saying the 13.2 version has open and known security problems
> because in that case I'm sure the openSUSE security team is also
> interested in them.

Well, we are currently doing big version updates in SLES and that will also
come for 13.2 soonish (tm).

(It might need changes to some scripts using ntpdc and yast2 ntp client)

Ciao, Marcus
___
Evergreen mailing list
Evergreen@lists.rosenauer.org
http://lists.rosenauer.org/mailman/listinfo/evergreen


Re: [Evergreen] Missing securityfixes for ntpd

2016-05-04 Thread Wolfgang Rosenauer
Hi,

Am 04.05.2016 um 06:41 schrieb Ronny Peine:
> Hello Evergreen-Team,
> 
> as I can see in https://bugzilla.suse.com/show_bug.cgi?id=952611 most
> likely all of the lately securityfixes for ntpd are missing in openSUSE
> 13.1 (since Mai 2015). Would it be possible to maybe have the ntpd
> version from openSUSE Leap 42.1?

We try to avoid updates if not really required from a security
perspective or because of critical issues.

I'm wondering which security fixes you are referring to? From what I can
see is that the 13.1 version is on par with the 13.2 version security wise.
Are you saying the 13.2 version has open and known security problems
because in that case I'm sure the openSUSE security team is also
interested in them.


Wolfgang

___
Evergreen mailing list
Evergreen@lists.rosenauer.org
http://lists.rosenauer.org/mailman/listinfo/evergreen


[Evergreen] Missing securityfixes for ntpd

2016-05-03 Thread Ronny Peine
Hello Evergreen-Team,

as I can see in https://bugzilla.suse.com/show_bug.cgi?id=952611 most
likely all of the lately securityfixes for ntpd are missing in openSUSE
13.1 (since Mai 2015). Would it be possible to maybe have the ntpd
version from openSUSE Leap 42.1?

Kind regards,
Ronny
___
Evergreen mailing list
Evergreen@lists.rosenauer.org
http://lists.rosenauer.org/mailman/listinfo/evergreen