Hi Mark, How do I get in contact with them, should I just send a message to secur...@debian.org?
Thanks, - J On Fri, May 17, 2024 at 10:54 AM Mark Brown <broo...@debian.org> wrote: > On Fri, May 17, 2024 at 10:43:26AM -0400, John Waffle wrote: > > > - The zlib package page https://tracker.debian.org/pkg/zlib says that > > CVE-2023-45853 < > https://security-tracker.debian.org/tracker/CVE-2023-45853> > > is ignored, what is the basis for ignoring this CVE? > > - Is there a plan to backport zlib 1:1.3.dfsg-3.1 to bookworm? It looks > > like it's currently in trixie > > Please direct any questions about security updates to the security team. >