Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1063878

Bug#990439: postsrsd: CVE-2021-35525

Show all headers | View raw

Hi Oxan,

On Mon, Jul 05, 2021 at 06:03:10PM +0200, Oxan van Leeuwen wrote:
> Hi,
> 
> On 29-06-2021 07:41, Salvatore Bonaccorso wrote:
> > The following vulnerability was published for postsrsd.
> > 
> > CVE-2021-35525[0]:
> 
> Thanks for the report, I've unfortunately missed this release. Do you want
> to fix this through a DSA, or should I prepare&upload a stable (and
> bullseye) update?

I think we can do the following action plan, let me know if you agree:
The release btw is not yet fully missed, so I would suggest: upload a
very targetted fix aimed for bullseye to unstable, ask the release
team for unblocking and aging the package, so we make sure the fix
lands in bullseye before the release.

For buster, it looks to me that the issue is low severity enough that
we can have an update via an upcoming point release.

Do you concur?

Regards,
Salvatore

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bug#990439: postsrsd: CVE-2021-35525 Salvatore Bonaccorso <carnil@debian.org> - 2021-06-29 07:50 +0200
  Bug#990439: postsrsd: CVE-2021-35525 Oxan van Leeuwen <oxan@oxanvanleeuwen.nl> - 2021-07-05 18:20 +0200
    Bug#990439: postsrsd: CVE-2021-35525 Salvatore Bonaccorso <carnil@debian.org> - 2021-07-05 22:00 +0200
      Bug#990439: postsrsd: CVE-2021-35525 Oxan van Leeuwen <oxan@oxanvanleeuwen.nl> - 2021-07-14 22:10 +0200
        Bug#990439: postsrsd: CVE-2021-35525 Salvatore Bonaccorso <carnil@debian.org> - 2021-07-15 22:10 +0200

csiph-web