On Mon, Jan 26, 2015 at 09:07:19PM +0530, Ritesh Raj Sarraf wrote: > On 01/21/2015 01:23 PM, Moritz Muehlenhoff wrote: > > In the past someone from upstream posted the upstream commits to the > > bug log, maybe you can contact them for more information so that we > > can merge the isolated fixes into the jessie version? Cheers, Moritz > > Moritz, > > For unstable, I've pushed the upload an d asked for an exception.
I've added the VMSVGA fixes to the security tracker, but there are also two issues in "Core", which apply to wheezy/jessie: Could you please check back with upstream on CVE-2015-0377 and CVE-2015-0418? http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html Cheers, Moritz -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org