Hi Tormod, On Fri, Oct 30, 2015 at 06:45:44PM +0100, Tormod Volden wrote: > On Sun, Oct 25, 2015 at 12:03 PM, Tormod Volden wrote: > > On Sun, Oct 25, 2015 at 7:41 AM, Salvatore Bonaccorso wrote: > >> On Sat, Oct 24, 2015 at 11:59:38PM -0400, Michael Gilbert wrote: > >>> A new upstream version is out that fixes a crash while swapping > >>> monitors, which has security implications. > > > > Here is also a debdiff for stable (jessie-security) > > I have updated the patch with the now assigned CVE reference. AFAICS > it still hasn't been uploaded?
No not yet. We have it though on our todo list here: https://anonscm.debian.org/viewvc/secure-testing/data/dsa-needed.txt?view=markup Regards, Salvatore