Re: nsis CVE-2023-37378

[Salvatore Bonaccorso <carnil@debian.org>]

hi Sean, hi Sylvain,

On Sat, Jul 08, 2023 at 05:35:36PM +0200, Sylvain Beucler wrote:
> Hi,
> 
> On 08/07/2023 10:04, Sean Whitton wrote:
> > On Sat 08 Jul 2023 at 09:14am +02, Salvatore Bonaccorso wrote:
> > 
> > > Just noticed the suffix for the version for the buster-security / LTS
> > > upload was +deb9u1, was this intentional? This should have been
> > > +deb10u1.
> > 
> > It wasn't.  Thank you for pointing out the mistake.
> 
> I should have seen/noted this while doing my quick review, sorry about that.
> I guess I got confused as I'm working on a stretch update for another
> package.

Thanks for confirming. I was worried it might cause conflicts with any
update in potential lower suites (even not officially anymore Debian),
but I realized now it is not (stretch had 2.51-1).

So all "green" nevertheless.

Thank you,

Regards,
Salvatore