On Wed, 2017-05-10 at 22:19 +0300, Adrian Bunk wrote: > On Sun, Apr 23, 2017 at 09:38:42PM +0100, Adam D. Barratt wrote: > > Control: tags -1 + confirmed > > > > On Mon, 2017-03-27 at 16:47 +0100, Mark Hindley wrote: > > > I would like to arrange update of apt-cacher 1.7.10 in Jessie to fix the > > > HTTP > > > splitting issue tracked in #858739 (no CVE allocated). > > > > > > I have prepared 1.7.10+deb8u1 which is available from > > > http://hindley.org.uk/~mark/debian > > > > Please go ahead. > >... > > Mark, did this upload get lost somewhere? > > This CVE is now fixed in wheezy-security and uploaded for > stretch, but not yet for jessie.
It's in the p-u-new queue, waiting for processing, as of last night - as can be seen at https://release.debian.org/proposed-updates/stable.html > And in a related topic: > > #786661 apt-cacher: Does not work in inetd mode - fails to create > /var/run/apt-cacher > > This RC bug was reported against the version in jessie and is still > unfixed there. > > Could you add this fix and then send a debdiff to the bug so that Adam > can approve fixing also this issue in jessie? Please don't, at least in those specific terms. If it's a separate issue, it wants a new bug. p-u bugs only get re-used for subsequent uploads if those are related to the issue covered by the initial upload. Regards, Adam

