Control: tags -1 - moreinfo Hi Adam,
On Wed, Dec 04, 2019 at 10:04:04PM +0000, Adam D. Barratt wrote: > Control: tags -1 + moreinfo > > On Wed, 2019-12-04 at 22:50 +0100, Roland Rosenfeld wrote: > > This fixes CVE-2019-19555 in buster. Since this is tagged > > "unimportant" by the security team on > > https://security-tracker.debian.org/tracker/CVE-2019-19555 they won't > > publish a DSA, so I tend to send this into the next point release of > > buster. > > The Security Tracker and BTS suggest this issue is not yet resolved in > unstable - is that correct? The package has been uploaded to unstable, but it's only just not yet installed and the tracker data thus knowing the version. Cf. https://tracker.debian.org/news/1084412/accepted-fig2dev-1327b-2-source-into-unstable/ and https://salsa.debian.org/security-tracker-team/security-tracker/commit/08d5562d87450a464efa5fbecaa792a38bee6123 Regards, Salvatore