Bug#802942: jessie-pu: package lldpd/0.7.11-2
Control: tags -1 + pending
On Mon, 2015-10-26 at 14:06 +0100, Vincent Bernat wrote:
> ❦ 25 octobre 2015 13:07 GMT, "Adam D. Barratt" <adam@adam-barratt.org.uk> :
>
> >> I would like to push the attached patch to jessie-pu to fix some
> >> security problems present in lldpd: lldpd can crash when receiving
> >> malformed LLDP management addresses. I have been in contact with
> >> security team and they think a stable update is good enough. Patches
> >> come from upstream.
> >
> > Please go ahead.
>
> Uploaded.
Flagged for acceptance.
> >> I will also have to upload an update for wheezy which is affected as
> >> well. Should I use this same bug number or open a new one?
> >
> > Please open a new bug. At the very least the updates for wheezy and
> > jessie will be released in separate point releases so need to be
> > separately trackable.
>
> My bad, the version in wheezy is not vulnerable.
Okay.
Regards,
Adam
Reply to: