Hi,

> Please mention the name CVE-2007-3215 in the changelog when fixing
> this bug.  A security update for stable may be necessary.

The stable version of glpi does not use the vulnerable code in question. Hence 
no stable update is necessary.

However, unstable of course still needs to be fixed, because the code itself 
is still insecure, and it's a priority to get these duplicated copies of 
phpmailer out of the archive.


regards,

Thijs

Attachment: pgp4stnQFctx6.pgp
Description: PGP signature

Reply via email to