Bug#834419: jessie-pu: package glibc/2.19-18+deb8u6
On 2016-09-03 19:18, Adam D. Barratt wrote:
> Control: tags -1 + confirmed
>
> On Thu, 2016-09-01 at 09:26 +0200, Aurelien Jarno wrote:
> > On 2016-08-28 16:54, Aurelien Jarno wrote:
> > > On 2016-08-28 14:59, Adam D. Barratt wrote:
> > > > On Fri, 2016-08-19 at 11:23 +0200, Aurelien Jarno wrote:
> > > > > On 2016-08-15 15:29, Aurelien Jarno wrote:
> > > > [...]
> > > > > > I would like to upload a new glibc package for the next jessie release.
> > > > >
> > > > > In the meantime a new security issue (CVE-2016-6323) has been found and
> > > > > backported to the upstream 2.19 stable branch. I would like to also
> > > > > include this change into the jessie upload. You will find updated diff
> > > > > and debdiff attached.
> > > >
> > > > The Security Tracker suggests that the issue applies to glibc in
> > > > unstable and is not yet fixed there; is that correct?
> > >
> > > This is indeed correct. This fix is in our git tree ready for the 2.24-1
> > > upload, but it hasn't happened yet as we are waiting for a transition
> > > slot (see #834855).
> >
> > The transition has started, so this issue is now fixed in unstable.
>
> Thanks; please go ahead.
>
Thanks, I have just uploaded it.
Aurelien
--
Aurelien Jarno GPG: 4096R/1DDD8C9B
aurelien@aurel32.net http://www.aurel32.net
Reply to: