Hi, On Mon, Sep 07, 2015 at 12:42:32PM +0200, Vincent Lefevre wrote: > On 2015-09-07 12:26:22 +0200, Guido Günther wrote: > > On Mon, Sep 07, 2015 at 11:41:55AM +0200, Vincent Lefevre wrote: > > > Well, stable is not affected by this bug, but by other security > > > problems. The patches are available here, so that I don't see any > > > problem. > > > > Stable is affected by this bug. > > No, this must be a different bug. > > $ apt-show-versions -a libxml2 > libxml2:amd64 2.9.2+really2.9.1+dfsg1-0.1 install ok installed > libxml2:amd64 2.9.1+dfsg1-5 stable ftp.fr.debian.org > No stable-updates version > libxml2:amd64 2.9.1+dfsg1-5 testing ftp.fr.debian.org > libxml2:amd64 2.9.2+really2.9.1+dfsg1-0.1 unstable ftp.fr.debian.org > No experimental version > libxml2:amd64/unstable 2.9.2+really2.9.1+dfsg1-0.1 uptodate > > stable has 2.9.1+dfsg1-5, which is not affected. This bug appeared > in 2.9.2.
I'm talking about #781232 only since this is the bug this thread is attached to and stable is affected by that one (see the version information of this bug). I filed that bug initially. That said. We have a fix and there's a NMU in the delayed queue so can't we just fix this one in all suites and move on? Cheers, -- Guido