Hi Tim,
On 8/3/22 02:22, Tim Abbott wrote:
Just following up on this -- it makes me sad that this publicly known
RCE vulnerability is still not fixed in stable.
-Tim Abbott
Please don't top-post, we don't do that in Debian, and also:
> Because it messes up the order in which people normally read text.
> Why is top-posting such a bad thing?
> Top-posting.
> What is the most annoying thing in e-mail?
FYI, I'm sad too, but there's nothing I can do but pinging again the
stable release team about this. You hear me well: the stable release
team. Not the security team since they do not want to do a security
announcement and an update through stable-security (so it shall be done
through a point release, dealing with the stable release team).
This means writing to 1002...@bugs.debian.org. That's the only email
address that has influence on accepting the fixed version. Feel free to
ping that email address until you get a reply. I agree that no reply
since the 29th of Jan is sad...
Cheers,
Thomas Goirand (zigo)
