On Mon, Jan 05, 2015 at 01:47:40AM +1100, Russell Sim wrote: > Moritz Muehlenhoff <j...@debian.org> writes: > > > Source: libgit2 > > Severity: important > > Tags: security > > > > libgit2 is also affected by the recent git vulnerability: > > http://openwall.com/lists/oss-security/2014/12/18/21 > > Thanks for the heads up. The new release of libgit2 0.21.3 addresses > this issue but it will have to wait until after the unfreeze before I > can upload it to unstable.
Hi Russell, this was fixed in Debian unstable, but jessie still has 0.21.1-2.1. Please either ask the release team for an unblock or provide a targeted fix for jessie. Cheers, Moritz -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org