Control: tags -1 + pending On Wed, 2013-03-20 at 20:00 +0000, Adam D. Barratt wrote: > On Tue, 2013-03-19 at 23:46 +0000, David Claughton wrote: > > Bug #702436 has recently been reported against graphviz, which advises > > that graphviz is being linked with an ancient shipped version of libltdl > > instead of the system version. On investigation it has become clear > > that the version being linked against is susceptible to a known security > > issue - DSA-1958-1 (CVE-2009-3736). > > Assuming that the resulting package has been tested on a stable system, > please go ahead; thanks.
Uploaded and flagged for acceptance in to p-u; thanks. Regards, Adam -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
