Bug#889915: libfaad2 in Wheezy contains patches for some security bugs. They were not backported to Jessie.

Fabian Greffrath fabian at debian.org
Fri Feb 9 09:31:37 UTC 2018


Hi Salvatore,

Salvatore Bonaccorso wrote:
> The current issues which were fixed in DLA-1077-1 are all no-dsa, so
> thei did not warrant a DSA via security.d.o. Can you fix those issues
> via upcoming point releases?

yes, probably. But I guess that's not Mikulas' point:

Both wheezy and jessie had package version 2.7-8. While wheezy got a fixed
package with 2.7-8+deb7u1, jessie didn't. The fix should be as straight as
uploading the same (source) package to jessie that got uploaded to wheezy.

CC:ing Markus Koschany <apo at debian.org> who did the upload to wheezy.

Thanks!

 - Fabian



More information about the pkg-multimedia-maintainers mailing list