Package: sponsorship-requests Severity: normal I'm seeking assistance uploading a new version of the ScrollZ IRC client to unstable that addresses an outstanding CVE: https://security-tracker.debian.org/tracker/CVE-2021-29376. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=986215
Changes: scrollz (2.2.3-2) unstable; urgency=high . * Applied patch to ctcp.c to fix CVE-2021-29376 from https://github.com/ScrollZ/ScrollZ/pull/26 (Closes: #986215) * Applied minor patch from upstream to the above fix I'm listed as the maintainer in this package's control file, but I haven't had a key in the keyring for several years. This should be the minimum change required to fix this issue. I anticipate there will also be stable and possibly oldstable uploads, as well. Post-freeze, I do plan to update the source package to a newer upstream version. -- Mike Markley <m...@markley.org>