Bug#704775: Processed: found 704775 in 1.8.3+dfsg-4squeeze6

2013-04-25 Thread Sam Hartman
OK. Why don't you run that patch by debian-rele...@lists.debian.org with a SRM tag in the subject. If you get an ack, then I'm happy to to sign and upload. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.de

Bug#704775: Processed: found 704775 in 1.8.3+dfsg-4squeeze6

2013-04-21 Thread Benjamin Kaduk
On Tue, 16 Apr 2013, Benjamin Kaduk wrote: Having seen the reproducer, I am of the opinion that this bug should get fixed in stable. I am planning to prepare a candidate stable upload (which may include another bugfix if it seems appropriate) later this week for consideration. The attached ha

Bug#704775: Processed: found 704775 in 1.8.3+dfsg-4squeeze6

2013-04-16 Thread Benjamin Kaduk
On Mon, 15 Apr 2013, Sam Hartman wrote: "Tom" == Tom Yu writes: Tom> Sam Hartman writes: >> My recommendation is that this is not worth a DSA or stable fix >> for squeeze unless some Debian user comes forward and says that >> they're seeing crashes in the wild related to this.

Bug#704775: Processed: found 704775 in 1.8.3+dfsg-4squeeze6

2013-04-15 Thread Sam Hartman
> "Tom" == Tom Yu writes: Tom> Sam Hartman writes: >> My recommendation is that this is not worth a DSA or stable fix >> for squeeze unless some Debian user comes forward and says that >> they're seeing crashes in the wild related to this. >> >> --Sam Tom> Keep

Bug#704775: Processed: found 704775 in 1.8.3+dfsg-4squeeze6

2013-04-15 Thread Tom Yu
Sam Hartman writes: > My recommendation is that this is not worth a DSA or stable fix for > squeeze unless some Debian user comes forward and says that they're > seeing crashes in the wild related to this. > > --Sam Keep in mind that unmodified client software can trivially trigger this vulnerab

Bug#704775: Processed: found 704775 in 1.8.3+dfsg-4squeeze6

2013-04-15 Thread Sam Hartman
My recommendation is that this is not worth a DSA or stable fix for squeeze unless some Debian user comes forward and says that they're seeing crashes in the wild related to this. --Sam -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Troub