Bug#877260: jessie-pu: package busybox/1:1.22.0-9+deb8u2

2017-11-30 Thread Christoph Biedl
Second attempt, updated debdiff attached. Changes: also address: + * Fix integer overflow in bzip2 decompresson. +Closes: #879732 [CVE-2017-15873] + * Filter out terminal escape sequence filtering in autocompletion. +Closes: #882258 [CVE-2017-16544] A call for tests was sent to debian

Bug#877260: jessie-pu: package busybox/1:1.22.0-9+deb8u2

2017-09-29 Thread Adam D. Barratt
Control: tags -1 + confirmed d-i On Fri, 2017-09-29 at 22:44 +0200, Christoph Biedl wrote: > as mentioned in #-1, I'd like to fix the existing non-dsa > issues in busybox. > As for the stretch request, I'm happy with the patch but we'll need a d-i ack. Regards, Adam

Bug#877260: jessie-pu: package busybox/1:1.22.0-9+deb8u2

2017-09-29 Thread Christoph Biedl
Package: release.debian.org Severity: normal Tags: jessie User: release.debian@packages.debian.org Usertags: pu Hello release team, as mentioned in #-1, I'd like to fix the existing non-dsa issues in busybox. For *jessie*, https://security-tracker.debian.org/busybox lists the following issue