On Mon, 2005-12-19 at 08:49 +0100, Martin Schulze wrote:
> You didn't mention CVE-2005-3417.  Is the version in sarge not vulnerable
> to it?  Or did you miss it?  Or did you just didn't document this?

This has been fixed but indeed isn't documented in the changelog. The
fact is that CVE-2005-341{5,6,7} are all concentrated in one function,
that function has been fixed. Should we add that CVE id aswell and
rebuild or is that not necessary?


bye,
Thijs

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to