Richard Atterer wrote:
 
> > Since CVE-2009-2625 doesn't allow code injection, but only DoS and given 
> > that libwww in oldstable is only used by wmweather, I think we can ignore 
> > it, unless Nico wants to work on an update?
> 
> Well, I've already prepared new versions of the packages, although they are 
> completely untested ATM, except that I had a look at them with 
> debdiff/interdiff: <http://atterer.net/libwww/>

Please upload this for a oldstable point update. Please use 
distribution=oldstable
and file a bug against release.debian.org (with reportbug from 
testing/unstable),
so that the stable release managers can ack the upload.

Cheers,
        Moritz



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to