[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Release Critical Security Bug in Bazel Dependency

Thanks, Olek!

Looks like the bug is fixed in the latest release of google-oauth-client. Does this mean we just need to upgrade its version in Debian?

Please let me know if I can help with anything!

On Sun, May 30, 2021 at 6:32 PM Olek Wojnar <olek@debian.org> wrote:
Debian Bazel Team,

It just came to my attention that there is a Release Critical Security
Bug against the google-oauth-client-java package. [1] If not fixed
quickly, this will result in the removal of that package as well as its
dependencies (google-api-client-java and bazel-bootstrap). Fixing this
is now my #1 priority. I'll update this list with progress.


[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=988944

Reply to: