On mar., 2015-04-14 at 14:32 -0400, Anthony DeRobertis wrote: > The changelog entry, at least for i386, gives 14 May *2013* as the date. > Weird a security update got delayed that long, but also concerning is > that the libx11 changelog gives 11 Apr *2015*. > > If those dates are correct, then it'd appear that xrender was /not/ > built against the fixed libx11, meaning it doesn't really include the > CVE-2013-7439 fix. If you take a torough look, the changelog entry date is *the exact same* as the previous changelog entry. It does look weird, but it's the same on other binNMus. Regards, -- Yves-Alexis
Attachment:
signature.asc
Description: This is a digitally signed message part