Re: Bug#962067: buster-pu: package dbus/1.12.18-0+deb10u1
Control: tags -1 + confirmed d-i
On Tue, 2020-06-02 at 21:22 +0100, Simon McVittie wrote:
> dbus 1.12.18 fixes a local denial of service vulnerability for which
> the Security Team have indicated they do not intend to issue a DSA.
>
> If possible I would like to use upstream 1.12.x versions of dbus for
> buster (security and) stable updates, similar to the policy used in
> stretch and jessie. This branch includes security fixes and selected
> non-intrusive bug fixes (and unfortunately also the usual Autotools
> noise).
>
That sounds OK to me, but will need the usual KiBi-ack due to the udeb.
Regards,
Adam
Reply to: