On Thu, Nov 23, 2017 at 02:51:56PM -0500, Antoine Beaupré wrote: > > Fun times. So I'm stuck now - I reported the CVE issues upstream so > they're at least aware of the issue: > > https://github.com/Exiv2/exiv2/issues/174 > > ... but I am not sure what to do with the package in Wheezy. I'm tempted > to mark this as no-dsa because there's no upstream fix and we can't > reproduce, but I wonder if we should just mark it as not-affected > instead. > > Opinions? > Antoine,
The problems you reported sound quite puzzling. Would you like for me to try to at least to see if I can get the ASAN build to complete without failing? Did you have to adjust any dependencies to get exiv2 to build in jessie? Regards, -Roberto -- Roberto C. Sánchez
