Re: Bug#867814: stretch-pu: package ncurses/6.0+20161126-1+deb9u1

Control: tags -1 + pending On Sun, 2017-09-24 at 09:16 +0200, Sven Joachim wrote: > On 2017-09-23 19:59 +0100, Adam D. Barratt wrote: > > > Control: tags -1 -moreinfo +confirmed > > > > On Thu, 2017-09-07 at 19:06 +0200, Cyril Brulebois wrote: > > > Sven Joachim (2017-09-06):

Re: Bug#867814: stretch-pu: package ncurses/6.0+20161126-1+deb9u1

On 2017-09-23 19:59 +0100, Adam D. Barratt wrote: > Control: tags -1 -moreinfo +confirmed > > On Thu, 2017-09-07 at 19:06 +0200, Cyril Brulebois wrote: >> Sven Joachim (2017-09-06): >> > Meanwhile seven new CVEs in the tic library and programs have been >> > reported, and I

Re: Bug#867814: stretch-pu: package ncurses/6.0+20161126-1+deb9u1

Control: tags -1 -moreinfo +confirmed On Thu, 2017-09-07 at 19:06 +0200, Cyril Brulebois wrote: > Sven Joachim (2017-09-06): > > Meanwhile seven new CVEs in the tic library and programs have been > > reported, and I would like to fix those as well, see the attached > > new > >

Re: Bug#867814: stretch-pu: package ncurses/6.0+20161126-1+deb9u1

Hi Sven, On Thu, Sep 07, 2017 at 08:20:34PM +0200, Sven Joachim wrote: > On 2017-09-07 05:32 +0200, Salvatore Bonaccorso wrote: > > > Not a must, and note that is just a comment on my side, I'm not a SRM: > > if possible add a bug closer as well to the changelog entry so that > > when the point

Re: Bug#867814: stretch-pu: package ncurses/6.0+20161126-1+deb9u1

On 2017-09-07 05:32 +0200, Salvatore Bonaccorso wrote: > Not a must, and note that is just a comment on my side, I'm not a SRM: > if possible add a bug closer as well to the changelog entry so that > when the point release happends, the correct fixed version is as well > propagated to the BTS

Re: Bug#867814: stretch-pu: package ncurses/6.0+20161126-1+deb9u1

Sven Joachim (2017-09-06): > Meanwhile seven new CVEs in the tic library and programs have been > reported, and I would like to fix those as well, see the attached new > debdiff. It contains all the library changes from the 20170826 upstream > patchlevel and the program fixes of

Re: Bug#867814: stretch-pu: package ncurses/6.0+20161126-1+deb9u1

Hi Sven On Wed, Sep 06, 2017 at 06:52:36PM +0200, Sven Joachim wrote: > On 2017-07-19 20:30 +0200, Sven Joachim wrote: > > > Control: tags -1 - moreinfo > > > > On 2017-07-15 12:50 +0200, Sven Joachim wrote: > > > >> Control: tags -1 - confirmed > >> Control: tags -1 + moreinfo > >> > >> On

Re: Bug#867814: stretch-pu: package ncurses/6.0+20161126-1+deb9u1

On 2017-07-19 20:30 +0200, Sven Joachim wrote: > Control: tags -1 - moreinfo > > On 2017-07-15 12:50 +0200, Sven Joachim wrote: > >> Control: tags -1 - confirmed >> Control: tags -1 + moreinfo >> >> On 2017-07-15 11:04 +0100, Adam D. Barratt wrote: >> >>> Control: tags -1 + confirmed d-i >>> >>>

Re: Bug#867814: stretch-pu: package ncurses/6.0+20161126-1+deb9u1

Control: tags -1 - moreinfo On 2017-07-15 12:50 +0200, Sven Joachim wrote: > Control: tags -1 - confirmed > Control: tags -1 + moreinfo > > On 2017-07-15 11:04 +0100, Adam D. Barratt wrote: > >> Control: tags -1 + confirmed d-i >> >> On Sun, 2017-07-09 at 19:30 +0200, Sven Joachim wrote: >>>

Re: Bug#867814: stretch-pu: package ncurses/6.0+20161126-1+deb9u1

Control: tags -1 - confirmed Control: tags -1 + moreinfo On 2017-07-15 11:04 +0100, Adam D. Barratt wrote: > Control: tags -1 + confirmed d-i > > On Sun, 2017-07-09 at 19:30 +0200, Sven Joachim wrote: >> Recently a few flaws in the tic program and the tic library have been >> detected: null

Re: Bug#867814: stretch-pu: package ncurses/6.0+20161126-1+deb9u1

Control: tags -1 + confirmed d-i On Sun, 2017-07-09 at 19:30 +0200, Sven Joachim wrote: > Recently a few flaws in the tic program and the tic library have been > detected: null pointer dereference, buffer overflow, stack smashing, you > name it. Six bugs have been reported in the Red Hat