Bug#889915: libfaad2 in Wheezy contains patches for some security bugs. They were not backported to Jessie.

[Fabian Greffrath]

Hi Salvatore,

Salvatore Bonaccorso wrote:
> The current issues which were fixed in DLA-1077-1 are all no-dsa, so
> thei did not warrant a DSA via security.d.o. Can you fix those issues
> via upcoming point releases?

yes, probably. But I guess that's not Mikulas' point:

Both wheezy and jessie had package version 2.7-8. While wheezy got a fixed
package with 2.7-8+deb7u1, jessie didn't. The fix should be as straight as
uploading the same (source) package to jessie that got uploaded to wheezy.

CC:ing Markus Koschany <apo at debian.org> who did the upload to wheezy.

Thanks!

 - Fabian