[Pkg-zsh-devel] Multiple vulnerabilities in stable zsh package?

[Axel Beckert]

Hi,

Yves-Alexis Perez wrote:
> Basically all the issues have been marked as unimportant or no-dsa. They might
> qualify for a stable update but it's up to the maintainers to request that
> from the release team.

At least for CVE-2018-13259 and CVE-2018-0502, a stable update is
planned and currently tested.

		Regards, Axel
-- 
 ,''`.  |  Axel Beckert <abe at debian.org>, https://people.debian.org/~abe/
: :' :  |  Debian Developer, ftp.ch.debian.org Admin
`. `'   |  4096R: 2517 B724 C5F6 CA99 5329  6E61 2FF9 CD59 6126 16B5
  `-    |  1024D: F067 EA27 26B9 C3FC 1486  202E C09E 1D89 9593 0EDE
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-zsh-devel/attachments/20180930/8ece7751/attachment.sig>