Control: fixed -1 4.2.29-1
The aforementioned mentioned security update would be
DLA-3090-1
https://lists.debian.org/debian-lts-announce/2022/08/msg00022.html
Sadly we didn't see the bug at that time, adding Cc:
[email protected] helps.
It's now part of the (non-Debian) ELTS offering, so it would be worth
fixing there.
The upstream fix appears to be:
https://github.com/horde/turba/commit/bc53d856ca87656cdc6e5fafd54f2360eb247e24
(v4.2.26)
https://github.com/horde/turba/commit/0d1e74802dd2ff8758c5b1dd5323a0101d49897d
(v5.0.0alpha6)
The "createFromConfig" call is present in 4.2.29-1 in Debian, marking it
as fixed there.
Cheers!
Sylvain Beucler
Debian LTS Team
