-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Wed, 9 Nov 2005 19:40:40 +0100 Martin Schulze <[EMAIL PROTECTED]> wrote:
> Do you have any idea about the state of the package in woody? > From a first glance it doesn't seem to contain the same code. > Can you confirm that it isn't affected by this problem? Confirmed: AWStats 4.0 does nowhere "eval"uate variables, so is not vulnerable to this security issue. - Jonas - -- * Jonas Smedegaard - idealist og Internet-arkitekt * Tlf.: +45 40843136 Website: http://dr.jones.dk/ - Enden er nær: http://www.shibumi.org/eoti.htm -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) iD8DBQFDclWrn7DbMsAkQLgRAmBzAJ9sHwThM4uXVX2KRh1KFpEAUS2/tQCgk6tR 3QpNSM2ugJMQgUWfW1oPfHI= =QT4C -----END PGP SIGNATURE-----