Bug#942024: stretch-pu: package openjpeg2/2.1.2-1.1+deb9u4

2019-10-14 Thread Hugo Lefeuvre
Hi, > I think that second occurrence of 2018-21010 might be incorrect. :-) right, same typo twice. I meant CVE-2016-9112 of course :) > Please go ahead. uploaded, thanks! -- Hugo Lefeuvre (hle)|www.owl.eu.com RSA4096_ 360B 03B3 BF27 4F4D 7A3F D5E8 14AA 1EB8 A247 3DFD

Bug#942024: stretch-pu: package openjpeg2/2.1.2-1.1+deb9u4

2019-10-11 Thread Adam D. Barratt
Control: tags -1 + confirmed On Wed, 2019-10-09 at 09:40 +0200, Hugo Lefeuvre wrote: > as discussed in #939553[0], no DSA will be issued by the security > team for > CVE-2018-21010 and this vulnerability can be fixed via -pu. The > attached > debdiff addresses this issue, along with

Bug#942024: stretch-pu: package openjpeg2/2.1.2-1.1+deb9u4

2019-10-09 Thread Hugo Lefeuvre
Package: release.debian.org Severity: normal Tags: stretch User: release.debian@packages.debian.org Usertags: pu Dear release managers, as discussed in #939553[0], no DSA will be issued by the security team for CVE-2018-21010 and this vulnerability can be fixed via -pu. The attached debdiff