Control: tag -1 confirmed
On Sun, May 19, 2024 at 02:03:09PM +0000, Bastien Roucariès wrote:
> diff -Nru sendmail-8.17.1.9/debian/changelog
> sendmail-8.17.1.9/debian/changelog
> --- sendmail-8.17.1.9/debian/changelog 2023-01-11 22:26:28.000000000
> +0000
> +++ sendmail-8.17.1.9/debian/changelog 2024-05-13 18:44:56.000000000
> +0000
> @@ -1,3 +1,24 @@
> +sendmail (8.17.1.9-2+deb12u1) bookworm-security; urgency=high
Target should be bookworm.
> diff -Nru sendmail-8.17.1.9/debian/NEWS.Debian
> sendmail-8.17.1.9/debian/NEWS.Debian
> --- sendmail-8.17.1.9/debian/NEWS.Debian 1970-01-01 00:00:00.000000000
> +0000
> +++ sendmail-8.17.1.9/debian/NEWS.Debian 2024-05-13 18:44:56.000000000
> +0000
> @@ -0,0 +1,19 @@
> +sendmail (8.17.1.9-2+deb12u1) bookworm-security; urgency=medium
> +
> + Sendmail was affected by SMTP smurgling (CVE-2023-51765).
^
"smuggling"
Same query over a news file as for the bullseye request.
With a couple of fixes please go ahead.
Thanks,
--
Jonathan Wiltshire j...@debian.org
Debian Developer http://people.debian.org/~jmw
4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51
ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1
