Bug#877639: jessie-pu: package sqlite3/3.8.7.1-1+deb8u3

2018-06-17 Thread Jonathan Wiltshire
Control: tag -1 wontfix Hi, This request was approved and tagged 'confirmed', but no upload was subsequently made. With the final point release for Jessie now being prepared, it's unfortunately too late for this package to be updated. Thanks, -- Jonathan Wiltshire

Bug#877639: jessie-pu: package sqlite3/3.8.7.1-1+deb8u3

2017-11-18 Thread Adam D. Barratt
Control: tags -1 + confirmed On Tue, 2017-10-03 at 19:23 +0200, Laszlo Boszormenyi (GCS) wrote: > I'd like to fix CVE-2017-10989 in SQLite3 for Jessie, which is a > heap-based buffer over-read via undersized RTree blobs. > It's considered remotely exploitable, still marked as no-DSA by the > Secur

Bug#877639: jessie-pu: package sqlite3/3.8.7.1-1+deb8u3

2017-10-03 Thread Laszlo Boszormenyi (GCS)
Package: release.debian.org Severity: normal Tags: jessie User: release.debian@packages.debian.org Usertags: pu Hi SRMs, I'd like to fix CVE-2017-10989 in SQLite3 for Jessie, which is a heap-based buffer over-read via undersized RTree blobs. It's considered remotely exploitable, still marked