Bug#841724: jessie-pu: package guile-2.0/2.0.11+1-9
Control: tags -1 + moreinfo
Control: severity -1 normal
On Sat, 2016-10-22 at 13:10 -0500, Rob Browning wrote:
> I'd like to propose an update for jessie as described by the attached
> debdiff. Though the final upload/diff might be slightly different
> (i.e. the dpm hashes).
> Both of the changes (patches) have been cherry-picked from upstream as
> described in the patch headers.
The security tracker indicates that both issues - CVE-2016-8605 and
CVE-2016-8606 - still affect the guile-2.0 packages in unstable. Is that
correct? If so then that would be a prerequisite to applying the fixes