Re: [SRM] Proposed stable update for opensc (maybe nmu; fixes CVE-2010-4523)
On Thu, 23 Dec 2010 17:28:01 +0100, Julien Cristau wrote:
> On Wed, Dec 22, 2010 at 15:40:55 +0000, Jonathan Wiltshire wrote:
>
> > This patch has come from two upstream commits to fix the CVE and the
> > debdiff for an nmu is attached. If it's ok with you, I'll go ahead with if
> > the maintainer hasn't already done so in a day or so.
> >
> > jmm has confirmed there will be no DSA for it.
> >
> Does this include the fixes for the issues referenced in
> http://article.gmane.org/gmane.comp.security.oss.general/3978, assuming
> lenny is affected? (AFAICT they don't have CVE IDs yet)
No, those affect different packages (pcsc-lite and ccid). I've checked
and lenny is affected by those as well.
Mike
Reply to: