Control: tags -1 + moreinfo Control: severity -1 normal On Sat, 2016-10-22 at 13:10 -0500, Rob Browning wrote: > I'd like to propose an update for jessie as described by the attached > debdiff. Though the final upload/diff might be slightly different > (i.e. the dpm hashes). > > Both of the changes (patches) have been cherry-picked from upstream as > described in the patch headers.
The security tracker indicates that both issues - CVE-2016-8605 and CVE-2016-8606 - still affect the guile-2.0 packages in unstable. Is that correct? If so then that would be a prerequisite to applying the fixes in stable. Regards, Adam