[Pkg-clamav-devel] Bug#986622: Bug#986622: fixes

Utkarsh Gupta utkarsh at debian.org
Wed Apr 14 08:08:19 BST 2021


Hello,

On Wed, Apr 14, 2021 at 12:32 AM Sebastian Andrzej Siewior
<sebastian at breakpoint.cc> wrote:
> Usually yes, I let it slide (unfortunatelly) and was checking best
> options moving forward. After all I need reasons to present to the
> release team.

I just noticed that the only CVE that affects buster is CVE-2021-1405.
The other two affects only 0.103.0 and 0.103.1 and the patch for
CVE-2021-1405 could be easily backported to buster. Maybe we could
instead do that now? And later when there's a need, we can backport
the entire new version? What do you think?


- u



More information about the Pkg-clamav-devel mailing list