[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [debian-lts] qemu package



Hello Nguyen,

On Tue, 24 Mar 2015, Nguyen Cong wrote:
> I would like to send debdiff file of qemu for reviewing.
> This patch aims to fix CVE-2014-3689 and CVE-2014-3640.

I'm sorry but I fear that nobody will help you on this one
for multiple reasons:

- qemu's support status was unclear for some time but now
  it's clearly in the unsupported list:
  http://anonscm.debian.org/cgit/collab-maint/debian-security-support.git/plain/security-support-ended.deb6

- your upload takes care of only a very small subset of the open CVE

Cheers,
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/


Reply to: