On Tue, 26 Sep 2017 17:56:57 +0200 Raphael Hertzog <hert...@debian.org> wrote: > Except that version 0.26 is vulnerable to multiple security issues which > are currently not present in earlier versions [...] Raphaël, what makes you sure that these CVEs are not present in earlier versions (e.g. in 0.25 currently in testing)?
They were reported against 0.26 because that version was fuzzed, that's all, AFICT. -richy. -- Richard B. Kreckel <https://in.terlu.de/~kreckel/>
