[Pkg-fglrx-devel] Bug#803517: fglrx-driver: CVE-2015-7723, CVE-2015-7724: Privilege Escalation Via Symlink Attacks On POSIX Shared Memory With Insecure Permissions

Patrick Matthäi pmatthaei at debian.org
Mon Nov 2 08:50:32 UTC 2015



Am 02.11.2015 um 09:46 schrieb Andreas Beckmann:
> On 2015-10-30 23:20, Andreas Beckmann wrote:
>
>> probably no dsa for wheezy/jessie as well
>> regular pu would be possible, but requires a new upstream version
> I filed a PU request for jessie to get 12.9 in there:
> https://bugs.debian.org/803730

Thanks!

>
> Or is there any reason we shouldn't update jessie to 12.9?
>
>
No there should not be any reason. Also gnome users would benefit from 
it and the release team did something similar in the past for fglrx, 
already.

-- 
/*
Mit freundlichem Gruß / With kind regards,
  Patrick Matthäi
  GNU/Linux Debian Developer

   Blog: http://www.linux-dev.org/
E-Mail: pmatthaei at debian.org
         patrick at linux-dev.org
*/




More information about the Pkg-fglrx-devel mailing list