Bug#695192: bind9: CVE-2012-5688

2012-12-13 Thread Philipp Kern
On Thu, Dec 13, 2012 at 03:38:31PM +1300, Matthew Grant wrote: > Why does the Wheezy release team have its nose so stuck up about a minor > upstream version number? > > 9.8.4-P1 IS ISC's official bug fixed release of the 9.8.x source tree , > INCLUDING 9.8.1* > > Don't drive the security maintain

Bug#695192: bind9: CVE-2012-5688

2012-12-12 Thread Matthew Grant
Why does the Wheezy release team have its nose so stuck up about a minor upstream version number? 9.8.4-P1 IS ISC's official bug fixed release of the 9.8.x source tree , INCLUDING 9.8.1* Don't drive the security maintainers into loops about unsupported code in an upcoming stable release! Sheesh,

Bug#695192: bind9: CVE-2012-5688

2012-12-12 Thread Moritz Muehlenhoff
On Wed, Dec 05, 2012 at 05:25:36AM -0700, LaMont Jones wrote: > On Wed, Dec 05, 2012 at 09:31:00AM +0100, Moritz Muehlenhoff wrote: > > Package: bind9 > > Severity: grave > > Tags: security > > Justification: user security hole > > Please see https://kb.isc.org/article/AA-00828 > > Stable is not af

Bug#695192: bind9: CVE-2012-5688

2012-12-05 Thread LaMont Jones
On Wed, Dec 05, 2012 at 09:31:00AM +0100, Moritz Muehlenhoff wrote: > Package: bind9 > Severity: grave > Tags: security > Justification: user security hole > Please see https://kb.isc.org/article/AA-00828 > Stable is not affected. This needs to be fixed through > testing-proposed-updates, > since

Bug#695192: bind9: CVE-2012-5688

2012-12-05 Thread Moritz Muehlenhoff
Package: bind9 Severity: grave Tags: security Justification: user security hole Please see https://kb.isc.org/article/AA-00828 Stable is not affected. This needs to be fixed through testing-proposed-updates, since the testing and unstable packages have diverged and won't be updated that late in t