Author: hle
Date: 2017-11-20 10:22:27 +0000 (Mon, 20 Nov 2017)
New Revision: 57847
Modified:
data/dla-needed.txt
Log:
Update NOTEs for lame entry in dla-needed
Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt 2017-11-20 09:37:51 UTC (rev 57846)
+++ data/dla-needed.txt 2017-11-20 10:22:27 UTC (rev 57847)
@@ -24,8 +24,8 @@
lame (Hugo Lefeuvre)
NOTE: Couldn't reproduce CVE-2017-{69-72}, but successfully reproduced
CVE-2017-150{18,45,46}
NOTE: 20171120: Backporting 3.100 is not conceivable, diff >40k lines.
- NOTE: Issues are all no-dsa in Jessie, so if I can't update Jessie as well
I'll probably mark
- NOTE: them no-dsa.
+ NOTE: Instead, lame's maintainer will switch jessie to also use libsndfile
in the next Jessie
+ NOTE: point update, simply forward the changes to Wheezy (this should fix
almost all open CVEs).
--
ldns (Roberto C. Sánchez)
NOTE: 201711118: Fix for CVE-2017-1000231 will need some adjustment for
wheezy (lamby)
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
