[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#900920: stretch-pu: package freedink-dfarc/3.12-1+deb9u1



Control: tags -1 + confirmed

On Wed, 2018-06-06 at 19:54 +0200, beuc@debian.org wrote:
> Please consider this update to freedink-dfarc for stretch.
> It fixes a security issue that can overwrite arbitrary user files.
> Sending to stable following security team's directions from 2018-06-
> 01.

+freedink-dfarc (3.12-1+deb9u1) stable; urgency=high

Please use "stretch" as the distribution.

+  * Fix directory traversal in D-Mod extractor (CVE-2018-0496)
+  * Upload to 'stable' as security team rejected a DSA to
+    'stretch-security' (no justification)

The changelog is not the place for such commentary - please remove it.

With the above changes made, and assuming that the resulting package
has been tested on stretch, please feel free to upload.

Regards,

Adam


Reply to: