On Thu, 23 Dec 2010 17:28:01 +0100, Julien Cristau wrote: > On Wed, Dec 22, 2010 at 15:40:55 +0000, Jonathan Wiltshire wrote: > > > This patch has come from two upstream commits to fix the CVE and the > > debdiff for an nmu is attached. If it's ok with you, I'll go ahead with if > > the maintainer hasn't already done so in a day or so. > > > > jmm has confirmed there will be no DSA for it. > > > Does this include the fixes for the issues referenced in > http://article.gmane.org/gmane.comp.security.oss.general/3978, assuming > lenny is affected? (AFAICT they don't have CVE IDs yet)
No, those affect different packages (pcsc-lite and ccid). I've checked and lenny is affected by those as well. Mike -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org