[ubuntu/groovy-proposed] chrony 3.5.1-1ubuntu1 (Accepted)

Thu Aug 27 05:24:13 UTC 2020

chrony (3.5.1-1ubuntu1) groovy; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - d/chrony.conf: use ubuntu ntp pool and server (LP 1744664 1754358)
    - Set -x as default if unable to set time (e.g. in containers) (LP 1589780)
      Chrony is a single service which acts as both NTP client (i.e. syncing the
      local clock) and NTP server (i.e. providing NTP services to the network),
      and that is both desired and expected in the vast majority of cases.
      But in containers syncing the local clock is usually impossible, but this
      shall not break the providing of NTP services to the network.
      To some extent this makes chrony's default config more similar to 'ntpd',
      which complained in syslog but still provided NTP server service in those
      cases.
      + debian/chrony.service: allow the service to run without CAP_SYS_TIME
      + debian/control: add new dependency libcap2-bin for capsh (usually
        installed anyway, but make them explicit to be sure).
      + debian/chrony.default: new option SYNC_IN_CONTAINER to not fall back
        (Default off) [fixed a minor typo in the comment in this update]
      + debian/chronyd-starter.sh: wrapper to handle special cases in containers
        and if CAP_SYS_TIME is missing. Effectively allows to run NTP server in
        containers on a default installation and avoid failing to sync time (or
        if allowed to sync, avoid multiple containers to fight over it by
        accident).
      + debian/install: make chrony-starter.sh available on install.
      + debian/docs, debian/README.container: provide documentation about the
        handling of this case.
  * Dropped changes
    - d/t/control: harden time-sources-from-dhcp-servers test for systemd change
      (LP: 1873031) [no more needed with recent systemd that is in groovy]

chrony (3.5.1-1) unstable; urgency=medium

  * Import upstream version 3.5.1:
    - Please see /usr/share/doc/chrony/NEWS.gz for the release notes.
    - CVE-2020-14367: create new file when writing pidfile.

  * debian/chrony.lintian-overrides:
    - Remove unused override.

  [ Ville Skyttä ]
  * debian/chrony.conf:
    - Comment spelling fix. (MR: !5)

Date: Wed, 26 Aug 2020 15:30:48 +0200
Changed-By: Christian Ehrhardt <christian.ehrhardt at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/chrony/3.5.1-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 26 Aug 2020 15:30:48 +0200
Source: chrony
Architecture: source
Version: 3.5.1-1ubuntu1
Distribution: groovy
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Christian Ehrhardt <christian.ehrhardt at canonical.com>
Changes:
 chrony (3.5.1-1ubuntu1) groovy; urgency=medium
 .
   * Merge with Debian unstable. Remaining changes:
     - d/chrony.conf: use ubuntu ntp pool and server (LP 1744664 1754358)
     - Set -x as default if unable to set time (e.g. in containers) (LP 1589780)
       Chrony is a single service which acts as both NTP client (i.e. syncing the
       local clock) and NTP server (i.e. providing NTP services to the network),
       and that is both desired and expected in the vast majority of cases.
       But in containers syncing the local clock is usually impossible, but this
       shall not break the providing of NTP services to the network.
       To some extent this makes chrony's default config more similar to 'ntpd',
       which complained in syslog but still provided NTP server service in those
       cases.
       + debian/chrony.service: allow the service to run without CAP_SYS_TIME
       + debian/control: add new dependency libcap2-bin for capsh (usually
         installed anyway, but make them explicit to be sure).
       + debian/chrony.default: new option SYNC_IN_CONTAINER to not fall back
         (Default off) [fixed a minor typo in the comment in this update]
       + debian/chronyd-starter.sh: wrapper to handle special cases in containers
         and if CAP_SYS_TIME is missing. Effectively allows to run NTP server in
         containers on a default installation and avoid failing to sync time (or
         if allowed to sync, avoid multiple containers to fight over it by
         accident).
       + debian/install: make chrony-starter.sh available on install.
       + debian/docs, debian/README.container: provide documentation about the
         handling of this case.
   * Dropped changes
     - d/t/control: harden time-sources-from-dhcp-servers test for systemd change
       (LP: 1873031) [no more needed with recent systemd that is in groovy]
 .
 chrony (3.5.1-1) unstable; urgency=medium
 .
   * Import upstream version 3.5.1:
     - Please see /usr/share/doc/chrony/NEWS.gz for the release notes.
     - CVE-2020-14367: create new file when writing pidfile.
 .
   * debian/chrony.lintian-overrides:
     - Remove unused override.
 .
   [ Ville Skyttä ]
   * debian/chrony.conf:
     - Comment spelling fix. (MR: !5)
Checksums-Sha1:
 b82877bd9ab6d7f30853a767b92ce47d6d397444 2459 chrony_3.5.1-1ubuntu1.dsc
 3decde1c1d56e87d89b34cba662266a945453b3a 459902 chrony_3.5.1.orig.tar.gz
 942e5aecdfb59fb263560d08a029e511b1c7d9e7 41932 chrony_3.5.1-1ubuntu1.debian.tar.xz
 a7752185d0939b635c617e29052d9ca618ef2d72 6807 chrony_3.5.1-1ubuntu1_source.buildinfo
Checksums-Sha256:
 27cec143c636f6475234309d90a66bfd7abc5f339fcf3eb903953cfd31529bd5 2459 chrony_3.5.1-1ubuntu1.dsc
 1ba82f70db85d414cd7420c39858e3ceca4b9eb8b028cbe869512c3a14a2dca7 459902 chrony_3.5.1.orig.tar.gz
 ffc1c8f3cb0904059e0fb2ad05a50eaaee53880fffa946db6fbc5c36357f8531 41932 chrony_3.5.1-1ubuntu1.debian.tar.xz
 312e9bfbbedcfc6c8d5b9266f40e5a738cc0116b6dcd9a6437e3c6435d612e7f 6807 chrony_3.5.1-1ubuntu1_source.buildinfo
Files:
 445fb4653ce1e021224e0e3005ec27c4 2459 net optional chrony_3.5.1-1ubuntu1.dsc
 1dfc70ae8fd18f0456101b7a91b30234 459902 net optional chrony_3.5.1.orig.tar.gz
 2e360acb47c1ab31e702b0a29d9cc5e9 41932 net optional chrony_3.5.1-1ubuntu1.debian.tar.xz
 e00cc34004908c6dde9776d7ae8eb15f 6807 net optional chrony_3.5.1-1ubuntu1_source.buildinfo
Original-Maintainer: Vincent Blut <vincent.debian at free.fr>

-----BEGIN PGP SIGNATURE-----
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=taYy
-----END PGP SIGNATURE-----