Hi Noah,

On Wed, May 20, 2015 at 10:52:14AM -0700, Noah Meyerhans wrote:
> On Wed, May 20, 2015 at 08:09:01AM +0200, Salvatore Bonaccorso wrote:
> > Marked as severity grave as this could lead to denial of service, see
> > the following for details:
> > 
> > http://www.openwall.com/lists/oss-security/2015/05/20/1
> > 
> > No CVE is assigned yet (will update the bug once assigned).
> 
> I've got an upload prepared. I'd like to wait until we've got a CVE
> assigned so I can include it in the changelog, but I don't plan on
> waiting more than a few more hours. I'll upload by 22:00 UTC with or
> without a CVE.

Thanks! Still by now no CVE was assigned.

> Are you preparing a (old)stable security update for this or do you require
> assistance?

Yes indeed we were planning to do so. Have both prepared and were
waiting for the CVE assignment. But if none is done we might proceed.
I can upload amd64 binary packages for testing exposure to people.d.o.

Regards,
Salvatore

Regards,
Salvatore


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to