[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#962068: stretch-pu: package dbus/1.10.30-0+deb9u1



Control: tags -1 + confirmed d-i

On Tue, 2020-06-02 at 21:30 +0100, Simon McVittie wrote:
> dbus 1.10.30 fixes a local denial of service vulnerability for which
> the Security Team have indicated they do not intend to issue a DSA
> (the same one as 1.12.18).
> 
> If possible I would like to continue to fix dbus issues in stretch
> via new upstream releases; this one only contains the CVE fix, plus
> its regression test and the usual Autotools noise.

I suspect this will be the last such update before stretch moves to
LTS, but that seems fair.

This will need the usual KiBi ack, so tagging and CCing.

Regards,

Adam


Reply to: