[Secure-testing-commits] r38174 - data
Guido Guenther
agx at moszumanska.debian.org
Tue Dec 8 18:08:03 UTC 2015
Author: agx
Date: 2015-12-08 18:08:03 +0000 (Tue, 08 Dec 2015)
New Revision: 38174
Modified:
data/dla-needed.txt
Log:
libraw affected by CVE-2015-8366
Need to follow up on the embedded code copies
Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt 2015-12-08 17:38:26 UTC (rev 38173)
+++ data/dla-needed.txt 2015-12-08 18:08:03 UTC (rev 38174)
@@ -26,6 +26,8 @@
--
libpng (Thorsten Alteholz)
--
+libraw
+--
libvncserver (Mike Gabriel)
NOTE: a fix is probably not trivial, as thread safety has to be backported to 0.9.7
NOTE: possibly ending up in ABI breakage, second opinion welcome!
More information about the Secure-testing-commits
mailing list