NTPsec CVEs Fixed in 1.1.3

[Richard Laager]

I received a Debian bug report pointing me to these public CVEs:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6442
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6443
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6444
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6445

These were supposedly fixed in 1.1.3.

They're not mentioned in the NEWS and no message was posted to
security-announce.

-- 
Richard