Re: How to deal with wireshark CVE affecting Squeeze
Hi Raphael,
2015-04-21 15:58 GMT+02:00 Raphael Hertzog <hertzog@debian.org>:
> Hi Balint,
>
> On Tue, 14 Apr 2015, Bálint Réczey wrote:
>> I have prepared the DLA and uploaded the fixed package but it ended up in NEW.
>> Dear FTP Masters, please accept it.
>
> FTR the package has been accepted on the same day. However I have not seen
> DLA-198-1 on debian-lts-announce@l.d.o (did your forget to sign it?).
I tried sending it several times even after subscirbing the list but
they did not go throught.
I have sent you now the DLA privately, please tell me if there is
something wrong with it.
>
> I just noticed that the DLA data had two small mistakes:
> - it said version 1.2.11-6+squeeze15 instead of 1.8.2-5wheezy15~deb6u1
> - CVE-2015-0562 was missing from the list of fixed CVE
Thanks!
>
> I fixed both of those in the security tracker, you might want
> to fix them in your announce before sending it to
> debian-lts-announce@l.d.o.
>
>> I would like to wait with that, since there was a lot of back and
>> forth changes already. :-)
>
> Sure, as long as you don't forget about it. :)
No, I kept it on my TODO list.
Cheers,
Balint
Reply to: