Bug#725359: polarssl: CVE-2013-5914 CVE-2013-5915

2013-10-16 Thread Roland Stigge
Hi, yes, preparing a new 1.2.9 for stable. This also fixes the other outstanding issues with polarssl. Should I upload it to the security queue? Roland -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#725359: polarssl: CVE-2013-5914 CVE-2013-5915

2013-10-16 Thread Moritz Muehlenhoff
On Wed, Oct 16, 2013 at 10:51:12AM +0200, Roland Stigge wrote: Hi, yes, preparing a new 1.2.9 for stable. This also fixes the other outstanding issues with polarssl. Should I upload it to the security queue? Yes, but please send a debdiff to t...@security.debian.org first Please use

Bug#725359: polarssl: CVE-2013-5914 CVE-2013-5915

2013-10-16 Thread Roland Stigge
Hi, On 16/10/13 17:20, Moritz Muehlenhoff wrote: yes, preparing a new 1.2.9 for stable. This also fixes the other outstanding issues with polarssl. Should I upload it to the security queue? Yes, but please send a debdiff to t...@security.debian.org first See attached polarssl.debdiff:

Bug#725359: polarssl: CVE-2013-5914 CVE-2013-5915

2013-10-16 Thread Moritz Muehlenhoff
On Wed, Oct 16, 2013 at 08:20:07PM +0200, Roland Stigge wrote: Hi, On 16/10/13 17:20, Moritz Muehlenhoff wrote: yes, preparing a new 1.2.9 for stable. This also fixes the other outstanding issues with polarssl. Should I upload it to the security queue? Yes, but please send a

Bug#725359: polarssl: CVE-2013-5914 CVE-2013-5915

2013-10-04 Thread Moritz Muehlenhoff
Package: polarssl Severity: grave Tags: security Justification: user security hole https://polarssl.org/tech-updates/security-advisories/polarssl-security-advisory-2013-04 https://polarssl.org/tech-updates/security-advisories/polarssl-security-advisory-2013-05 CVE-2013-5915 doesn't sound