Am 25. Januar 2020 21:36:09 MEZ schrieb "Adam D. Barratt" 
<a...@adam-barratt.org.uk>:
>Hi,
>
>I noticed that you've uploaded proposed "tigervnc" updates for stable
>and oldstable.
>
>Could you please file tracking bugs regarding the changes, as described
>in 
>https://www.debian.org/doc/manuals/developers-reference/pkgs.en.html#special-case-uploads-to-the-stable-and-oldstable-distributions
>?
>
>Regards,
>
>Adam

Hi Adam,

these are security fixes. See conversation with Salvatore for context.

Bug should be 

Debian Bug report logs - #947428
tigervnc: CVE-2019-15691 CVE-2019-15692 CVE-2019-15693 CVE-2019-15694 
CVE-2019-15695


Am 19. Januar 2020 11:31:53 MEZ schrieb Salvatore Bonaccorso 
<car...@debian.org>:
>Hi Mike, Joachim,
>
>On Sat, Jan 18, 2020 at 11:15:51PM +0000,
>mike.gabr...@das-netzwerkteam.de wrote:
>> Hi,
>> 
>> Am Samstag, 18. Januar 2020 schrieb Salvatore Bonaccorso:
>> > Hi Joachim, hi Mike,
>> > 
>> > On Sat, Jan 18, 2020 at 08:32:19PM +0100, Joachim Falk wrote:
>> > > Dear security team,
>> > > 
>> > > I also back ported the fixes to stretch
>> > >
>(https://salsa.debian.org/debian-remote-team/tigervnc/tree/stretch).
>> > > The fixed package for buster can be found at
>> > > https://salsa.debian.org/debian-remote-team/tigervnc/tree/buster.
> I
>> > > am awaiting your decision what to do with these fixes.
>> > 
>> > Can you fix those issues with the upcoming point releases for
>stretch
>> > and buster?
>> > 
>> > Regards,
>> > Salvatore
>> 
>> Sure, we can do that. Joachim, please let me know if you need a hand
>> with uploading to spu and old-spu.
>
>Perfect and thank you. Keep in mind that the upcoming point releases
>will be at 8th of february[1]. and the windows for uploading fixes
>closing the preveeding weekend.
>
>[1]:
>https://lists.debian.org/498bc782c076645b293c9449cdca83b1f29693d6.ca...@adam-barratt.org.uk
>
>Regards,
>Salvatore

Regards,

Joachim Falk


-- 
Diese Nachricht wurde von meinem Android-Gerät mit K-9 Mail gesendet.

Reply via email to