Hi,

Michael Stone wrote:
>> We should likely either:
>> 1) Patch the copy of cvsbug to fix the vulnerability; or
>> 2) Stop shipping cvsbug altogether.
> 
> 
> I'm inclined to support the latter in future releases;

Already done.

> I'm not sure that this warrents a DSA.

Right. I didn't even prepare a patch for sarge. ;)

bye,
  Roland


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to