[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Wheezy update of r-base?



On 12 March 2017 at 16:44, Dirk Eddelbuettel wrote:
| 
| On 12 March 2017 at 15:48, Markus Koschany wrote:
| | Hello dear maintainer(s),
| | 
| | the Debian LTS team would like to fix the security issues which are
| | currently open in the Wheezy version of r-base:
| | https://security-tracker.debian.org/tracker/CVE-2016-8714
| | 
| | Would you like to take care of this yourself?
| | 
| | If yes, please follow the workflow we have defined here:
| | https://wiki.debian.org/LTS/Development
| | 
| | If that workflow is a burden to you, feel free to just prepare an
| | updated source package and send it to debian-lts@lists.debian.org
| | (via a debdiff, or with an URL pointing to the source package,
| | or even with a pointer to your packaging repository), and the members
| | of the LTS team will take care of the rest. Indicate clearly whether you
| | have tested the updated package or not.
| | 
| | If you don't want to take care of this update, it's not a problem, we
| | will do our best with your package. Just let us know whether you would
| | like to review and/or test the updated package before it gets released.
| | 
| | You can also opt-out from receiving future similar emails in your
| | answer and then the LTS Team will take care of r-base updates
| | for the LTS releases.
| 
| I can probably help as I was / am already in contact with Moritz from the
| security team.
| 
| (But I was also traveling for a family matter and had the misfortune of
| seeing my server go off-grid.  Back now.)

I managed to build a full set of the Debian stable version 3.1.1 plus two
small and minimal patches.

See here for all files: 

  http://dirk.eddelbuettel.com/tmp/cve/

I am still awaiting feedback on this and haven't uploaded any to Debian yet.

Dirk

 
| Dirk
|  
| | Thank you very much.
| | 
| | Markus Koschany,
| |   on behalf of the Debian LTS team.
| | 
| | PS: A member of the LTS team might start working on this update at
| | any point in time. You can verify whether someone is registered
| | on this update in this file:
| | https://anonscm.debian.org/viewvc/secure-testing/data/dla-needed.txt?view=markup
| 
| -- 
| http://dirk.eddelbuettel.com | @eddelbuettel | edd@debian.org

-- 
http://dirk.eddelbuettel.com | @eddelbuettel | edd@debian.org


Reply to: