Hi Thorsten,

On Fri, Feb 24, 2017 at 11:23:40PM +0100, Thorsten Alteholz wrote:
> Hello Sebastian,
> 
> the Debian LTS team would like to fix the security issues which are
> currently open in the Wheezy version of radare2:
> https://security-tracker.debian.org/tracker/CVE-2017-6197

Thanks, I was not yet aware of the issue.

> Would you like to take care of this yourself?

I think stable and oldstable are not affected, since r_read_* was
not yet introduced in their versions. I'm preparing an update for
sid & experimental now.

> If yes, please follow the workflow we have defined here:
> https://wiki.debian.org/LTS/Development
>
> If that workflow is a burden to you, feel free to just prepare an
> updated source package and send it to debian-lts@lists.debian.org
> (via a debdiff, or with an URL pointing to the source package,
> or even with a pointer to your packaging repository), and the members
> of the LTS team will take care of the rest. Indicate clearly whether you
> have tested the updated package or not.
> 
> If you don't want to take care of this update, it's not a problem, we
> will do our best with your package. Just let us know whether you would
> like to review and/or test the updated package before it gets released.

Please take care of anything related to oldstable.

> You can also opt-out from receiving future similar emails in your
> answer and then the LTS Team will take care of radare2 updates
> for the LTS releases.

Please do. I'm available if there are any questions.

-- Sebastian

Attachment: signature.asc
Description: PGP signature

Reply via email to