[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: buster update for jackson-databind



On Mon, Apr 19, 2021 at 02:40:56PM +0200, Markus Koschany wrote:
> Hi,
> 
> Am Montag, den 19.04.2021, 13:15 +0530 schrieb Utkarsh Gupta:
> > Hello,
> > 
> > There are 18 no-dsa marked entries for jackson-databind for buster,
> > the same ones I fixed for jessie and also the same ones that I intend
> > to work on for stretch. It'd be thus unfair if those are pending in
> > buster and so I ask if it'd be OK for me to prepare a corresponding
> > update for buster (-pu)?
> > 
> > If you agree, I could send a debdiff in the next couple of days and
> > upload after your ack? Let me know what you think?
> 
> Fine with me. A buster-pu should be sufficient unless the security team thinks
> differently.

Ack, agreed.

Cheers,
        Moritz


Reply to: