On Wed, 2009-11-11 at 14:35 -0500, Michael Gilbert wrote: > On Wed, 11 Nov 2009 23:02:23 +0100 Julien BLACHE wrote: > > "Adam D. Barratt" wrote: > > > > Hi, > > > > > How big is the diff from prototype 1.4.0 (as used in the current > > > package) to 1.6.1? The bug report mentions that patches fixing the two > > > > Don't know, I haven't even looked. There were other issues before those > > two I believe, and they never got fixed. I know that the web interface > > works just fine with 1.6.1 so upgrading to 1.6.1 is not an issue. > > > > > CVEs are available, although I wasn't entirely clear as to whether they > > > apply to 1.4.0 or not. > > > > My bet is they don't; 1.4.0 is pretty ancient now. > > the prototype.js CVEs do apply to 1.4.0.
For the avoidance of any doubt, I meant whether the /patches/ apply to 1.4.0. Regards, Adam -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
