Hi,
On Sat, Oct 26, 2019 at 11:10:54PM -0400, Aaron M. Ucko wrote:
> Source: openafs
> Version: 1.8.4~pre1-1
> Severity: important
> Tags: security
>
> Could you please upload OpenAFS 1.8.5 to Debian, for the sake of both
> the security fixes (OPENAFS-SA-2019-00{1,2,3}) and Linux 5.3 support,
> which Debian's 1.8.4 prerelease slightly predates?
There were CVE assignments btw for those three, resulting in
CVE-2019-18601: http://openafs.org/pages/security/OPENAFS-SA-2019-003.txt
CVE-2019-18602: http://openafs.org/pages/security/OPENAFS-SA-2019-002.txt
CVE-2019-18603: http://openafs.org/pages/security/OPENAFS-SA-2019-001.txt
Regards,
Salvatore
