On Sat, 27 Sep 2014, john wrote: > I was wondering if CVE-2014-7186 and CVE-2014-7187 been addressed yet for > Debian. I note that Ubuntu pushed another patch addressing these earlier > today.
Yes, both are addressed by DSA-3035-1. AFAIK, these CVE numbers were not yet assigned at the time of the upload, so they were not mentioned in the changelog. -- "One disk to rule them all, One disk to find them. One disk to bring them all and in the darkness grind them. In the Land of Redmond where the shadows lie." -- The Silicon Valley Tarot Henrique Holschuh -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/20140928013915.ga30...@khazad-dum.debian.net