Hi Adam, I will support Joachim in sending the correct formal pu bug reports.
@Joachim: please ping me around 12am tomorrow or on Monday via Jabber on this. Greets, Mike Am Samstag, 25. Januar 2020 schrieb Joachim Falk: > Am 25. Januar 2020 21:36:09 MEZ schrieb "Adam D. Barratt" > <a...@adam-barratt.org.uk>: > >Hi, > > > >I noticed that you've uploaded proposed "tigervnc" updates for stable > >and oldstable. > > > >Could you please file tracking bugs regarding the changes, as described > >in > >https://www.debian.org/doc/manuals/developers-reference/pkgs.en.html#special-case-uploads-to-the-stable-and-oldstable-distributions > >? > > > >Regards, > > > >Adam > > Hi Adam, > > these are security fixes. See conversation with Salvatore for context. > > Bug should be > > Debian Bug report logs - #947428 > tigervnc: CVE-2019-15691 CVE-2019-15692 CVE-2019-15693 CVE-2019-15694 > CVE-2019-15695 > > > Am 19. Januar 2020 11:31:53 MEZ schrieb Salvatore Bonaccorso > <car...@debian.org>: > >Hi Mike, Joachim, > > > >On Sat, Jan 18, 2020 at 11:15:51PM +0000, > >mike.gabr...@das-netzwerkteam.de wrote: > >> Hi, > >> > >> Am Samstag, 18. Januar 2020 schrieb Salvatore Bonaccorso: > >> > Hi Joachim, hi Mike, > >> > > >> > On Sat, Jan 18, 2020 at 08:32:19PM +0100, Joachim Falk wrote: > >> > > Dear security team, > >> > > > >> > > I also back ported the fixes to stretch > >> > > > >(https://salsa.debian.org/debian-remote-team/tigervnc/tree/stretch). > >> > > The fixed package for buster can be found at > >> > > https://salsa.debian.org/debian-remote-team/tigervnc/tree/buster. > > I > >> > > am awaiting your decision what to do with these fixes. > >> > > >> > Can you fix those issues with the upcoming point releases for > >stretch > >> > and buster? > >> > > >> > Regards, > >> > Salvatore > >> > >> Sure, we can do that. Joachim, please let me know if you need a hand > >> with uploading to spu and old-spu. > > > >Perfect and thank you. Keep in mind that the upcoming point releases > >will be at 8th of february[1]. and the windows for uploading fixes > >closing the preveeding weekend. > > > >[1]: > >https://lists.debian.org/498bc782c076645b293c9449cdca83b1f29693d6.ca...@adam-barratt.org.uk > > > >Regards, > >Salvatore > > Regards, > > Joachim Falk > > > -- > Diese Nachricht wurde von meinem Android-Gerät mit K-9 Mail gesendet. > -- Gesendet von meinem Sailfish Gerät
