New changelog entries:
* New upstream version 4.2.8p11+dfsg (Closes: #851096)
- Refresh patches
- Drop ntpd-increase-stack-size included upstream
- CVE-2018-7185: Unauthenticated packet can reset authenticated
interleaved association (LOW/MED)
- CVE-2018-7184: Interleaved symmetric mode cannot recover from bad state
(LOW/MED)
- CVE-2018-7170 / CVE-2016-1549: Provide a way to prevent authenticated
symmetric passive peering (LOW)
- CVE-2018-7183: decodearr() can write beyond its 'buf' limits (Medium)
- CVE-2018-7182: ctl_getitem(): buffer read overrun leads to undefined
behavior and information leak (Info/Medium)
- CVE-2016-1549: Sybil vulnerability: ephemeral association attack
(mitigated in 4.2.8p7)
* convert dfsg.sh into mk-origtargz script
* Run wrap-and-sort
* Sync AppArmor profile changes from Ubuntu, including a fix for a
harmless AppArmor denial in /usr/local (Closes: #883022)
* Don't chown in postinst recursively.
Thanks to Daniel Kahn Gillmor (Closes: #889488)
* Build sntp against system libevent
* Drop versioned build-deps already fulfilled by oldoldstable
1c4f041...
by
Bernhard Schmidt <email address hidden>
Import patches-unapplied version 1:4.2.8p10+dfsg-6 to debian/sid
New changelog entries:
* Make sntp KoD path FHS-compliant.
Thanks to Aaron Smith (Closes: #863873)
* Drop historic Breaks/Pre-Depends
* Drop historic conffile handling from pre-jessie
* Adjust ntpdate description stating that it is deprecated
* Move Vcs-* to salsa
* Bump Standards-Version to 4.1.3.0, no changes necessary
* Cherry-pick patch from upstream to increase stack size.
Thanks to Frederic Endner-Dühr for testing (Closes: #887385)
* Temporarily add ntpdate lock for systemd wrapper.
Thanks to Christian Ehrhardt (Closes: #874540)
* Add note about AppArmor tunable in README.Debian (Closes: #883949)
e96ae83...
by
Bernhard Schmidt <email address hidden>
Import patches-unapplied version 1:4.2.8p10+dfsg-5 to debian/sid
