Bug#895936: stretch-pu: package patch/2.7.5-1+deb9u1

2018-06-12 Thread Adam D. Barratt
Control: tags -1 + confirmed On Tue, 2018-04-17 at 17:45 +0200, Laszlo Boszormenyi (GCS) wrote: > I'd like to fix CVE-2018-1000156 in patch for Stretch, which is an > arbitrary command execution in ed-style patches. > While it might be used for remote compromise, it would need a setup > to > accep

Bug#895936: stretch-pu: package patch/2.7.5-1+deb9u1

2018-04-17 Thread Laszlo Boszormenyi (GCS)
Package: release.debian.org Severity: normal Tags: stretch User: release.debian@packages.debian.org Usertags: pu Hi SRMs, I'd like to fix CVE-2018-1000156 in patch for Stretch, which is an arbitrary command execution in ed-style patches. While it might be used for remote compromise, it would