Hi Hugo, On Thu, Aug 08, 2019 at 03:21:31PM +0200, Hugo Lefeuvre wrote: > Hi, > > > > Buster received [0] per 2.0.4+dfsg1-1, but not [1]. Even if I was aware > > > that the initial patch was broken (see stretch patch descriptions), I > > > failed to handle this properly in the buster version. > > > > > > As far as I remember, I did not upload this diff yet. I'll just provide an > > > updated version asap. I will also update the testing NMU[2], which I > > > fortunately did not upload yet. > > > > Perfect, thank you for that! > > Done! You can find an updated debdiff for buster in attachement. The new > debdiff ships CVE-2019-5058.patch which addresses the remaining issue in > IMG_xcf.c.
Is the attachment missing? Regards, Salvatore