tag 656815 + squeeze confirmed
thanks

On Sat, 2012-01-21 at 22:28 +0000, Jonathan Wiltshire wrote:
> Testing has shown that the fix for CVE-2011-4360 introduces a regression:
> in some situations, an error is returned instead of a login prompt. Moreover,
> the Debian package seems not to disclose information as described by the CVE.

mediawiki, how we love thee.

> For this reason I would like to get a fix into this point release rather
> than waiting for the next. I realise the window technically closes this 
> weekend
> and I'm sorry for the late notice.
> 
> Debdiff attached, it's a one line change that just disables the patch in the
> quilt series file.

Please go ahead; thanks.

Regards,

Adam




-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
Archive: 
http://lists.debian.org/[email protected]

Reply via email to