Bug#781228: freexl: Multiple vulnerabilitities

Moritz Muehlenhoff jmm at inutil.org
Thu Mar 26 21:06:02 UTC 2015


On Thu, Mar 26, 2015 at 08:35:37PM +0100, Sebastiaan Couwenberg wrote:
> Hi Moritz,
> 
> On 03/26/2015 02:23 PM, Moritz Mühlenhoff wrote:
> > On Thu, Mar 26, 2015 at 11:08:52AM +0100, Sebastiaan Couwenberg wrote:
> >>> This is fixed in experimental, but since we're in freeze, testing
> >>> should rather be fixed with a targeted upload to sid plus unblock.
> >>> (A patch set and reproducers are linked from the oss-security posting).
> >>
> >> I have an update ready for unstable & jessie, I'll also prepare an update
> >> for wheezy.
> > 
> > Thanks! Please contact us at team at security.debian.org once the Wheezy update
> > is ready.
> 
> The packaging for wheezy is available in git:
> 
> http://anonscm.debian.org/cgit/pkg-grass/freexl.git/log/?h=wheezy
> 
> Is it OK to upload to wheezy-security?

Yes, please build with "-sa" (since freexl is new in wheezy-security)
and upload to security-master. I'll take care of the DSA.

Cheers,
        Moritz



More information about the Pkg-grass-devel mailing list