Bug#834854: jessie-pu: package charybdis/3.4.2-5~deb8u1

[Antoine Beaupré <anarcat@debian.org>]

On 2016-09-06 03:58:44, Adam D. Barratt wrote:
> On 2016-09-06 1:31, Antoine Beaupré wrote:
>> Turns out this took about three weeks instead of 24h. But 3.5.3 is
>> released, and I will push the update to unstable now.
>> 
>> The situation is a tad more complicated now because there was a 
>> security
>> issue disclosed in the meantime:
>> 
>> https://security-tracker.debian.org/tracker/CVE-2016-7143
>> 
>> ... which 3.5.3 fixes. I have prepared a deb8u2 update for the security
>> team in #836714, which the attached debdiff builds upon.
>
> When's that likely to be released? We can't really accept ~debu3 via p-u 
> containing the security update until there actually is a published 
> security update.

I just got approval from the security team for the upload, i should
complete this during the day.

3.5.3 was accepted in unstable, FWIW.

Thanks

-- 
The individual has always had to struggle to keep from being overwhelmed
by the tribe. If you try it, you will be lonely often, and sometimes
frightened. But no price is too high to pay for the privilege of owning
yourself.                - Friedrich Nietzsche