Re: Wheezy update of ntp?

[Ola Lundqvist <ola@inguza.com>]

Hi Kurt

Yes I'm trying to do the triaging with a most important package first approack. Then ntp happened to be on the top. I did not check the age, and I do not see why I should.

I thought it was better to inform you than not to.

It is much appreciated that you deal with this. I had noted in the dla-needed.txt file that you usually handle this. That was not visible in the mail to you as that email is fairly standardized.

/ Ola

Den 22 mar 2017 21:30 skrev "Kurt Roeckx" <kurt@roeckx.be>:

On Wed, Mar 22, 2017 at 09:02:16PM +0100, Ola Lundqvist wrote:
> Hello dear maintainer(s),
>
> the Debian LTS team would like to fix the security issues which are
> currently open in the Wheezy version of ntp:
> https://security-tracker.debian.org/tracker/CVE-2017-6460
> https://security-tracker.debian.org/tracker/CVE-2017-6463
> https://security-tracker.debian.org/tracker/CVE-2017-6464

Are you really asking again hours after those CVEs have been made
public, and it's not fixed yet in any other branch?

> Would you like to take care of this yourself?

Yes, like always, I will do this myself.


Kurt