On Thu, Mar 24, 2005 at 08:49:01PM -0500, Sam Hartman wrote:
> severity 300775 wishlist
> tags 300775 -security
  ^^^^^^^^^^^^^^^^^^^^^
Why this? PAM 0.76 is indeed vulnerable to the issues fixed in 0.78

> Hi.  I've explicitly decided not to upgrade PAM for sarge.  I had also
> decided when 0.77 came out that I didn't see a good reason to take it.
> Taking a new pam release is a painful process.

Yes, it might be painful, but fixing bugs is also important and these 
releases are primarily bug-fix releases.

> That said, I'm looking for people to help with PAM.  Would you be
> interested?  Are you familiar with pam enough to help try and merge in
> a new release?

I can help out, I am not extremely familiar with PAM but wouldn't mind 
jumping in and helping you with this release. Since sarge's base is frozen 
maybe an upload to experimental with 0.78 plus patches would be best right 
now and have it move into sid as soon as sarge is released...

Have you reviewed 0.78 or is that still work todo, if that is still pending 
I could try to get 0.78 preliminary packages out there

Regards

Javier

Attachment: signature.asc
Description: Digital signature

Reply via email to