Hi again Sebastian --
So I do have a further question, my expectation at this point is that a fixed package will appear in the repos, and the CVEs will show as fixed on the relevant Debian security pages. I haven't seen that yet, do you know how long that usually takes? Or are my expectations wrong, and there's another channel where things happen? > https://security-tracker.debian.org/tracker/CVE-2024-20506 > https://security-tracker.debian.org/tracker/CVE-2024-20505 Thanks again for your engagement and help! -- A. On Thu, Oct 03, 2024 at 09:53:25PM +0200, Sebastian Andrzej Siewior wrote: > On 2024-09-30 09:52:39 [-0400], Reid, Andrew C.E. (Fed) wrote: > > ... where it's listed as a "minor issue" for Bullseye, > > and "No DSA" for Bookworm, with a deferral to -updates. > > Bullseye is done by LTS team now. I submitted a pu for Bookworm [0] > which should get to proposed-updates once the stable team processes it. > > If you have further questions, just ask them. > > [0] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1083223 > > Sebastian -- Dr. Andrew C. E. Reid Physical Scientist, Computer Operations Administrator Center for Theoretical and Computational Materials Science National Institute of Standards and Technology, Mail Stop 8555 Gaithersburg MD 20899 USA [email protected] _______________________________________________ Pkg-clamav-devel mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-clamav-devel
