Bug#988386: Reporting CVE's from upstream

2021-05-12 Thread GCS
Control: tags -1 -moreinfo Hi Jeremy, On Tue, May 11, 2021 at 11:09 PM Jeremy Galindo wrote: > They're awaiting confirmation from MITRE, but the upstream maintainers wanted > to be able to answer the question: > >> And what, in your opinion, will be the distributions wanting to do ? >> Either

Bug#988386: Reporting CVE's from upstream

2021-05-11 Thread Jeremy Galindo
They're awaiting confirmation from MITRE, but the upstream maintainers wanted to be able to answer the question: And what, in your opinion, will be the distributions wanting to do ? > Either fix their current release version or upgrade to the latest one ? > Will they want the individual patches

Bug#988386: Reporting CVE's from upstream

2021-05-11 Thread Jeremy Galindo
Package: ntfs-3g Version: 2017.3.23AR.3 For CVE's pending from upstream, is everything already mirrored so upstream fixes are applied in the next release? I'm asking because the upstream maintainers are trying to identify how soon their fixes will be applied to your packages. Thanks, --

Bug#988386: Reporting CVE's from upstream

2021-05-11 Thread Salvatore Bonaccorso
Control: tags -1 + moreinfo Hi [disclaimer, not the maintainer here] On Tue, May 11, 2021 at 12:00:40PM -0400, Jeremy Galindo wrote: > Package: ntfs-3g > Version: 2017.3.23AR.3 > > For CVE's pending from upstream, is everything already mirrored so upstream > fixes are applied in the next