Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
FS#65724 - [ppp] Patch for CVE-2020-8597 still not available in stable
Attached to Project:
Arch Linux
Opened by JayJay Jazz (JayJayJazz) - Friday, 06 March 2020, 19:34 GMT
Last edited by freswa (frederik) - Saturday, 07 March 2020, 14:13 GMT
Opened by JayJay Jazz (JayJayJazz) - Friday, 06 March 2020, 19:34 GMT
Last edited by freswa (frederik) - Saturday, 07 March 2020, 14:13 GMT
|
DetailsDescription:
The package ppp was already patched to version "ppp 2.4.7-7", but this patch can't be found by pacman either in stable branch nor in testing branch. The testing package is also already flagged out-of-date. How should we proceed to have CVE-2020-8597 fixed on Arch installations? Additional info: * package version(s): Affected and available package version: 2.4.7-6 Patched, but unavailable version: 2.4.7-7 * Security Issue: https://security.archlinux.org/AVG-1101 * CVE: https://security.archlinux.org/CVE-2020-8597 |
This task depends upon
Closed by freswa (frederik)
Saturday, 07 March 2020, 14:13 GMT
Reason for closing: Not a bug
Additional comments about closing: Fix is in testing
Saturday, 07 March 2020, 14:13 GMT
Reason for closing: Not a bug
Additional comments about closing: Fix is in testing