On Tue, Nov 08, 2005 at 10:15:26PM -0500, Charles Fry wrote:

> Version 6.4-1.1 of awstats was uploaded to unstable in response to
> CVE-2005-1527. However, it was never uploaded to stable-security, even
> though version 6.4.1 is the current stable version of awstats.

> As far as I can tell, 6.4-1.1 (or 6.4.2) should be uploaded to
> stable-security.

According to the changelog of 6.4-2, you are now a co-maintainer of the
awstats package.  Would you please prepare a 6.4-1sarge1 upload to
stable-security consisting of awstats 6.4-1 plus the security patch?  If
6.4-1.1 doesn't contain any other changes that would be inappropriate in a
security update, 6.4-1sarge1 can be the same as 6.4-1.1 with a different
changelog.

Thanks,
-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
[EMAIL PROTECTED]                                   http://www.debian.org/

Attachment: signature.asc
Description: Digital signature

Reply via email to