Bug#858143: fix is not complete

2017-04-27 Thread Dominik George
Control: reopen -1

Hi,

> I'm investigated content of debian/patches/cve-2017-6967.diff from version
> 0.9.1-8 in unstable and by comparison with 
> https://github.com/neutrinolabs/xrdp/commit/4b8a33e087ee9cf5556b40b717cd7e8ff243b3c3
> it is missing important sesman/session.c part of patch.

You are right, a part went missing when rebasing.

Please have a look at the new patch now: 
https://anonscm.debian.org/cgit/pkg-remote/xrdp.git/tree/debian/patches/cve-2017-6967.diff

> The version 0.9.2 would be much better solution, because it solves many more
> problems.

I know, but 0.9.2 won't get a freeze exception.

Thanks,
Nik

-- 
PGP-Fingerprint: 3C9D 54A4 7575 C026 FB17  FD26 B79A 3C16 A0C4 F296

Dominik George · Hundeshagenstr. 26 · 53225 Bonn
Phone: +49 228 92934581 · https://www.dominik-george.de/

Teckids e.V. · FrOSCon e.V.
Fellowship of the FSFE · Piratenpartei Deutschland
Opencaching Deutschland e.V. · Debian Maintainer

LPIC-3 Linux Enterprise Professional (Security)


signature.asc
Description: PGP signature


Bug#858143: fix is not complete

2017-04-25 Thread rolnas

Version: 0.9.1-8

Dear all,

I'm investigated content of debian/patches/cve-2017-6967.diff from 
version 0.9.1-8 in unstable and by comparison with 
https://github.com/neutrinolabs/xrdp/commit/4b8a33e087ee9cf5556b40b717cd7e8ff243b3c3 
it is missing important sesman/session.c part of patch.


The version 0.9.2 would be much better solution, because it solves many 
more problems.


Regards,
Rolandas