Bug#923897: stretch-pu: package chrony/3.0-4+deb9u2

[Vincent Blut]

On Sat, Mar 09, 2019 at 02:21:28PM +0000, Adam D. Barratt wrote:

Control: tags -1 + confirmed

On Wed, 2019-03-06 at 22:07 +0100, Vincent Blut wrote:

I would like to update chrony in Stretch to fix #923137 (severity 
important). This issue is caused by the absence of the _llseek()
system 
call in the seccomp filter provided by chrony, which prevents some 
information to be logged on various 32-bit architectures when the
system 
call filter is active.

While working on the bug report mentionned above, I discovered that 
chronyd could also be incorrectly stopped when the system call filter
is 
enabled. This is due to the waitpid() system call being absent from
the 
seccomp filter. This is addressed by the 
allow-waitpid-in-seccomp-filter.patch patch.

Please go ahead.

Uploaded.

Regards,

Adam

Thanks,
Vincent

signature.asc
Description: PGP signature