Groups > linux.debian.bugs.dist > #1064642

Bug#990439: postsrsd: CVE-2021-35525

From	Oxan van Leeuwen <oxan@oxanvanleeuwen.nl>
Newsgroups	linux.debian.bugs.dist
Subject	Bug#990439: postsrsd: CVE-2021-35525
Date	2021-07-14 22:10 +0200
Message-ID	<CATmF-478-3@gated-at.bofh.it> (permalink)
References	(2 earlier) <Cxzu9-1z9-1@gated-at.bofh.it> <CveNb-1AA-1@gated-at.bofh.it> <CxCV3-3Ah-1@gated-at.bofh.it> <CveNb-1AA-1@gated-at.bofh.it> <CxCV3-3Ah-1@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

Hi Salvatore,

Sorry for the delay in getting back to you.

On 05-07-2021 21:47, Salvatore Bonaccorso wrote:
> I think we can do the following action plan, let me know if you agree:
> The release btw is not yet fully missed, so I would suggest: upload a
> very targetted fix aimed for bullseye to unstable, ask the release
> team for unblocking and aging the package, so we make sure the fix
> lands in bullseye before the release.
> 
> For buster, it looks to me that the issue is low severity enough that
> we can have an update via an upcoming point release.

Sounds like a plan. I've prepared the updated packages with a backport 
from upstream, asked my sponsor to upload them and filed 
unblock&tracking bugs (#991119 for bullseye and #991120 for buster).

Thanks!

Kind regards,
Oxan

Thread

Bug#990439: postsrsd: CVE-2021-35525 Salvatore Bonaccorso <carnil@debian.org> - 2021-06-29 07:50 +0200
  Bug#990439: postsrsd: CVE-2021-35525 Oxan van Leeuwen <oxan@oxanvanleeuwen.nl> - 2021-07-05 18:20 +0200
    Bug#990439: postsrsd: CVE-2021-35525 Salvatore Bonaccorso <carnil@debian.org> - 2021-07-05 22:00 +0200
      Bug#990439: postsrsd: CVE-2021-35525 Oxan van Leeuwen <oxan@oxanvanleeuwen.nl> - 2021-07-14 22:10 +0200
        Bug#990439: postsrsd: CVE-2021-35525 Salvatore Bonaccorso <carnil@debian.org> - 2021-07-15 22:10 +0200

csiph-web