[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <CAJ_zFkJgSzTV8WKRL7OW6ueFibVGvNY-P6sBNBrDeagLrbPfWw@mail.gmail.com>
Date: Thu, 18 Oct 2018 05:32:18 -0700
From: Tavis Ormandy <taviso@...gle.com>
To: Golden_Miller83@...tonmail.ch
Cc: oss-security@...ts.openwall.com
Subject: Re: Re: ghostscript: 1Policy operator gives access to
.forceput CVE-2018-18284
On Thu, Oct 18, 2018 at 3:51 AM Jordan Glover <Golden_Miller83@...tonmail.ch>
wrote:
> Do you know if upstream is going to make new release soon or distros
> should take the
> pain and backport all of those themselves?
>
AFAIK upstream only makes quarterly releases, so I think you need to
backport.
Tavis.
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
