Bug#923897: stretch-pu: package chrony/3.0-4+deb9u2

["Adam D. Barratt" <adam@adam-barratt.org.uk>]

Control: tags -1 + confirmed

On Wed, 2019-03-06 at 22:07 +0100, Vincent Blut wrote:
> I would like to update chrony in Stretch to fix #923137 (severity 
> important). This issue is caused by the absence of the _llseek()
> system 
> call in the seccomp filter provided by chrony, which prevents some 
> information to be logged on various 32-bit architectures when the
> system 
> call filter is active.
> 
> While working on the bug report mentionned above, I discovered that 
> chronyd could also be incorrectly stopped when the system call filter
> is 
> enabled. This is due to the waitpid() system call being absent from
> the 
> seccomp filter. This is addressed by the 
> allow-waitpid-in-seccomp-filter.patch patch.
> 

Please go ahead.

Regards,

Adam