CVE-2014-3477 fixed in dbus/1.6.8-1+deb7u2

2014-06-12 Thread Simon McVittie
In case the mention of the CVE ID in debian/changelog is not enough for someone to update the security tracker: CVE-2014-3477 is fixed in dbus/1.6.8-1+deb7u2, which was just accepted into proposed-updates. It was also fixed in dbus/1.8.4-1 for testing/unstable. If this change is desired

Re: CVE-2014-3477 fixed in dbus/1.6.8-1+deb7u2

2014-06-12 Thread Salvatore Bonaccorso
Hi Simon, On Thu, Jun 12, 2014 at 08:15:24PM +0100, Simon McVittie wrote: In case the mention of the CVE ID in debian/changelog is not enough for someone to update the security tracker: CVE-2014-3477 is fixed in dbus/1.6.8-1+deb7u2, which was just accepted into proposed-updates. It was also