Bug#879732: CVE-2017-15874 / CVE-2017-15873

[Moritz Muehlenhoff <jmm@inutil.org>]

On Wed, Oct 25, 2017 at 07:27:42PM +0200, Christoph Biedl wrote:
> Tags: upstream confirmed
> 
> Moritz Muehlenhoff wrote...
> 
> > Hi,
> > please see:
> 
> Thanks for the heads-up, we'll try to get this fixed as soon as
> possible. For the moment, I'm somewhat confused about the affected
> distributions as listed in the security tracker. Could you please check?

That's not surprising :-)

By default all older releases are marked as affected (unless specific
suites are updated to reflect that they are not vulnerable).

Cheers,
        Moritz