Bug#966028: buster-pu: package librsvg/2.44.10-2.1+deb10u1

2020-11-20 Thread Adam D. Barratt
[slightly delayed, as I just realised that I still had this in drafts for some reason] On Sun, 2020-09-20 at 21:26 +0200, Emilio Pozuelo Monfort wrote: > On 20/09/2020 10:55, Emilio Pozuelo Monfort wrote: > > On 25/07/2020 12:04, Adam D. Barratt wrote: > > > Unfortunately it appears that this

Bug#966028: buster-pu: package librsvg/2.44.10-2.1+deb10u1

2020-09-20 Thread Emilio Pozuelo Monfort
On 20/09/2020 10:55, Emilio Pozuelo Monfort wrote: > On 25/07/2020 12:04, Adam D. Barratt wrote: >> Hi, >> >> On Wed, 2020-07-22 at 13:26 +0200, Emilio Pozuelo Monfort wrote: >>> On 22/07/2020 13:19, Emilio Pozuelo Monfort wrote: So I have gone with the minimal backport to 2.44.10 instead

Bug#966028: buster-pu: package librsvg/2.44.10-2.1+deb10u1

2020-09-20 Thread Emilio Pozuelo Monfort
On 25/07/2020 12:04, Adam D. Barratt wrote: > Hi, > > On Wed, 2020-07-22 at 13:26 +0200, Emilio Pozuelo Monfort wrote: >> On 22/07/2020 13:19, Emilio Pozuelo Monfort wrote: >>> So I have gone with the minimal backport to 2.44.10 instead (which >>> I've also tested) and it's already uploaded.

Bug#966028: buster-pu: package librsvg/2.44.10-2.1+deb10u1

2020-07-25 Thread Adam D. Barratt
Hi, On Wed, 2020-07-22 at 13:26 +0200, Emilio Pozuelo Monfort wrote: > On 22/07/2020 13:19, Emilio Pozuelo Monfort wrote: > > So I have gone with the minimal backport to 2.44.10 instead (which > > I've also tested) and it's already uploaded. debdiff attached. > > Attached for real now.

Bug#966028: buster-pu: package librsvg/2.44.10-2.1+deb10u1

2020-07-22 Thread Emilio Pozuelo Monfort
On 22/07/2020 13:19, Emilio Pozuelo Monfort wrote: > So I have gone with the minimal backport to 2.44.10 instead (which I've > also tested) and it's already uploaded. debdiff attached. Attached for real now. Emilio diff -Nru librsvg-2.44.10/debian/changelog librsvg-2.44.10/debian/changelog ---

Bug#966028: buster-pu: package librsvg/2.44.10-2.1+deb10u1

2020-07-22 Thread Emilio Pozuelo Monfort
Package: release.debian.org Severity: normal Tags: buster User: release.debian@packages.debian.org Usertags: pu Hi, This update fixes CVE-2019-20446, which the Security Team marked as no-dsa. I considered updating to 2.44.16, which has a sensible set of changes to the librsvg code.