On Wed, Dec 07, 2005 at 11:42:08PM +1100, Hamish Moffatt wrote: > merge 342281 342337
Oops - I'm sorry, I missed that report. > The fixed version is an update to 3.01, not 3.00. I know, but the patch applies to 3.00 without much trouble. > #342281 is already fixed in unstable. sarge and woody fixes are pending > (as we need to create our own patch). Ok, so you noticed that my analysis was not completely correct - while the woody version indeed doesn't contain JPXStream.cc (and consequently, the JPX stream reader bug doesn't exist in woody), the other security holes (in Stream.cc) do exist in woody and need patching. Sorry for all the noise :-( Jan -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
