Re: openjdk-7 status

[Ola Lundqvist <ola@inguza.com>]

Hi Sylvain

It was meant to consider CVE-2019-2697.

I do not know anything about re-consider this CVE as nothing has been noted to that CVE that it has been ignored or should be treated in some other way.

// Ola 

On Mon, 13 May 2019 at 10:57, Sylvain Beucler <beuc@beuc.net> wrote:

Hi,

openjdk-7 is back in dla-needed.txt with the commit message "Sounds
serious enough".
However it was re-added the day after DLA-1782-1 and there's no new CVE
since.

Was it an oversight, or was it meant to reconsider
https://security-tracker.debian.org/tracker/CVE-2019-2697 which wasn't
addressed by that DLA?

Cheers!
Sylvain

--

 --- Inguza Technology AB --- MSc in Information Technology ----

|  ola@inguza.com                    opal@debian.org            |

|  http://inguza.com/                Mobile: +46 (0)70-332 1551 |

 ---------------------------------------------------------------