Control: tags -1 + pending On Sat, 2018-03-03 at 17:03 +0000, Adam D. Barratt wrote: > Control: tags -1 + confirmed > > On Sat, 2018-03-03 at 16:56 +0100, Sebastian Andrzej Siewior wrote: > > On 2018-03-03 16:02:37 [+0100], To sub...@bugs.debian.org wrote: > > > Clamav upstream released 0.99.4 on 2018-03-01 fixing five CVEs > > > [0]. > > > I > > > mention only two of them because the remaining three are already > > > fixed > > > (one in libclamunrar and two in libmspack). The debdiff is rather > > > huge, > > > mostly noise due to auto-tools or documentation. > > > > those two bugs didn't make it to the list because of debdiff'size. > > Always a good sign... > > > > [0] http://blog.clamav.net/2018/03/clamav-0994-has-been- > > > released.html > > Please feel free to upload. As a note on timing, the stretch upload > will either have to be in stable-new before uploads for 9.4 close (by > tomorrow morning should be safe) or wait until after the point > release > next weekend. >
Both uploaded, and flagged for acceptance into (o-)p-u. Regards, Adam