Bug#825087: jessie-pu: package chrony/1.30-2+deb8u2
Control: tags -1 + pending
On Wed, 2016-05-25 at 15:14 +0200, Vincent Blut wrote:
> [cc’ing Paul this time]
>
> On Tue, May 24, 2016 at 11:04:41PM +0200, Vincent Blut wrote:
> >On Tue, May 24, 2016 at 09:39:13PM +0100, Adam D. Barratt wrote:
> >>Control: tags -1 + confirmed
> >>
> >>On Mon, 2016-05-23 at 15:28 +0200, Vincent Blut wrote:
> >>>Could you please accept chrony 1.30-2+deb8u2 in the next jessie point
> >>>release? It fixes three issues of different magnitudes.
> >>>
> >>>The most important one is the fix for CVE-2016-1567 though it didn’t
> >>>warrant a DSA.
> >>>
> >>>The next one might sound probably not important enough to be fixed in a
> >>>stable point release but it has some nasty consequences. We are
> >>>mistakenly deleting the content of /var/lib/chrony on package removal.
> >>>This directory contains the driftfile and the measurement history for
> >>>each time source. The former file has a particularly important role, it
> >>>stores the gain or loss rate of the system clock relative to the RTC
> >>>which could take some time to calculate depending of how crappy the RTC
> >>>is so it would be definitely better if we could avoid to delete it each
> >>>time chrony is upgraded or installed from Config-Files state.
> >>>
> >>>To conclude, the last fix revises the postrotate script from the
> >>>logrotate configuration file. It suffers from two issues, the first one
> >>>is that it assumes the commandkey directive from chrony.conf takes ID 1,
> >>>that’s not necessarily true!
> >>
> >>Please go ahead.
> >
> >Thanks Adam!
> >
> >Paul, I just pushed these changes to the “jessie” branch; could you
> >please build, sign and upload?
Flagged for acceptance.
Regards,
Adam
Reply to: