[pkg-ntp-maintainers] Bug#820470: Bug#820470: ntp: upstream version ntp-4.2.8p6

[Kurt Roeckx]

On Fri, Apr 08, 2016 at 12:26:59PM -0600, Nicholas Luedtke wrote:
> Package: ntp
> Version: 1:4.2.8p4+dfsg-3
> Severity: wishlist
> 
> Dear Maintainer,
> 
> NTP version ntp-4.2.8p6 is available upstream and includes fixes for 9
> CVE's listed below. Though they are mostly minor the cumulative effect
> of removing these from our stream would be beneficial. We should
> consider updating ntp in sid/stretch to incorporate these security fixes.

It actually doesn't fix all of them.  I've been waiting for
upstream to finally fix it, but it seems nothing is happening.


Kurt