Bug#749266: wheezy-pu: package eglibc/2.13-38+deb7u2
On Mon, May 26, 2014 at 12:38:05PM +0100, Adam D. Barratt wrote:
> Control: tags -1 + confirmed
>
> On Sun, 2014-05-25 at 20:37 +0200, Aurelien Jarno wrote:
> > We would like to fix a some issues that have been identified in the
> > eglibc version included in wheezy. The best is probably to describe the
> > changelog:
> [...]
> > | * debian/patches/any/cvs-CVE-2013-4458.diff: backport a new part from
> > | upstream to fix a regression introduced in 2.13-38+deb7u1 in IPv6 name
> > | resolution. Closes: #738652.
> >
> > This fixes a regression caused by the deb7u1 upload. We had to backport
> > some patches to be able to fix the CVE-2013-4458 issue, and it occurs
> > that one of the patches introduced a bug fixed around one year after.
> > Therefore cvs-CVE-2013-4458.diff has been modified to also include this
> > patch, which is already included in upstream and jessie/sid for quite some
> > time.
>
> #738652 has rather confused version information, claiming that it
> affects 2.17-97 and above. Assuming that's entirely wrong, please fix
> it. :-)
This is indeed wrong, I have fixed it.
> Other than the above note, please go ahead; thanks.
Great, thanks for the review. I have just uploaded the package.
Regards,
Aurelien
--
Aurelien Jarno GPG: 4096R/1DDD8C9B
aurelien@aurel32.net http://www.aurel32.net
Reply to: