[Bug 1776877] Re: Security vulnerability in h2o 2.2.4

2018-06-22 Thread Simon Quigley
** Changed in: h2o (Ubuntu) Status: Incomplete => New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1776877 Title: Security vulnerability in h2o 2.2.4 To manage notifications about this bug

[Bug 1776877] Re: Security vulnerability in h2o 2.2.4

2018-06-22 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. Since the package referred to in this bug is in universe or multiverse, it is community maintained. If you are able, I suggest coordinating with upstream and posting a debdiff for this issue. When a debdiff is

[Bug 1776877] Re: Security vulnerability in h2o 2.2.4

2018-06-14 Thread Leonidas S. Barbosa
Hi Pete! Since the h2o package is in the universe repository, it is community maintained. This means that the security team will not be fixing the package unless a community member contributes a debdiff for sponsoring that fixes the issue. Here is the commit that fix this in upstream: