Re: Bug#871810: cvs: CVE-2017-12836: CVS and ssh command injection

2017-08-13 Thread Chris Lamb
Hi Thorsten, > […] Thanks for uploading. I'll send the DLA announcement out now… Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: Bug#871810: cvs: CVE-2017-12836: CVS and ssh command injection

2017-08-12 Thread Roberto C . Sánchez
Hi Thorsten, On Sat, Aug 12, 2017 at 05:26:22PM +, Thorsten Glaser wrote: > Hi LTS team, > > >>On Sat, Aug 12, 2017 at 12:36:57PM +0200, SC)bastien Delafond wrote: > > >>>For wheezy, you'll need to check directly with the Debian LTS team, that > >>>can be reached via

Re: Bug#871810: cvs: CVE-2017-12836: CVS and ssh command injection

2017-08-12 Thread Thorsten Glaser
Hi LTS team, >>On Sat, Aug 12, 2017 at 12:36:57PM +0200, SC)bastien Delafond wrote: >>>For wheezy, you'll need to check directly with the Debian LTS team, that >>>can be reached via debian-lts@lists.debian.org. is the attached debdiff ok to upload? (Specifically, is the distribution in the