Re: [rt.debian.org #4573] Re: Bug#717958: kfreebsd-9: CVE-2013-4851: nfsserver
2013/7/31 Steven Chamberlain <steven@pyro.eu.org>:
> On 31/07/13 12:45, Robert Millan wrote:
>>> It probably needs to
>>> end up in a README.Debian at least, plus mentioned in the changelog:
>>
>> Sounds fine too.
>
> I'm not sure how to deploy that file exactly. Could you please try?
> I'll be a little busy today.
Today I'm very short on time too (and still have to push the gcc -O1
fixes in experimental) :-(
I had a quick look, it seems to me that debian/NEWS would be the most
appropiate (it is displayed by apt-listchanges so it gets a lot more
attention than the changelog). Something like this:
kfreebsd-9 (9.0-10+deb70.3) wheezy-security; urgency=high
Multiple security issues related to IPv6 have been discovered
(CVE-xxx, CVE-yyy).
Please refer to README.ipv6 for extensive advice on how they can be mitigated.
-- Mr IPv6 <ipv6@example.org> Wed, 31 Jul 2013 13:52:17 +0200
--
Robert Millan
Reply to: