Re: buster update for jackson-databind
On Mon, Apr 19, 2021 at 02:40:56PM +0200, Markus Koschany wrote:
> Hi,
>
> Am Montag, den 19.04.2021, 13:15 +0530 schrieb Utkarsh Gupta:
> > Hello,
> >
> > There are 18 no-dsa marked entries for jackson-databind for buster,
> > the same ones I fixed for jessie and also the same ones that I intend
> > to work on for stretch. It'd be thus unfair if those are pending in
> > buster and so I ask if it'd be OK for me to prepare a corresponding
> > update for buster (-pu)?
> >
> > If you agree, I could send a debdiff in the next couple of days and
> > upload after your ack? Let me know what you think?
>
> Fine with me. A buster-pu should be sufficient unless the security team thinks
> differently.
Ack, agreed.
Cheers,
Moritz
Reply to: