Bug#646020: Ping: CVE-2011-3624

2014-02-14 Thread Arne Wichmann
begin  quotation  from Antonio Terceiro (in 20140212131039.ga2...@debian.org):
 On Mon, Feb 10, 2014 at 03:49:31PM +0100, Arne Wichmann wrote:
  There has been no action on this bug for over a year now. Is there any plan
  to do something about this?
 
 not quite
 
 - there is no patch for this anywhere
 - webrick is hardly something that anyone with a little bit of sanity
   would use in production

I see. Maybe there should just be a clear warning against using this (for
example by syslogging a warning) and then it could be marked as unimportant
in the security tracker...

cu

AW
-- 
[...] If you don't want to be restricted, don't agree to it. If you are
coerced, comply as much as you must to protect yourself, just don't support
it. Noone can free you but yourself. (crag, on Debian Planet)
Arne Wichmann (a...@linux.de)


signature.asc
Description: Digital signature


Bug#646020: Ping: CVE-2011-3624

2014-02-12 Thread Antonio Terceiro
On Mon, Feb 10, 2014 at 03:49:31PM +0100, Arne Wichmann wrote:
 Hi!
 
 There has been no action on this bug for over a year now. Is there any plan
 to do something about this?

not quite

- there is no patch for this anywhere
- webrick is hardly something that anyone with a little bit of sanity
  would use in production

-- 
Antonio Terceiro terce...@debian.org


signature.asc
Description: Digital signature


Bug#646020: Ping: CVE-2011-3624

2014-02-10 Thread Arne Wichmann
Hi!

There has been no action on this bug for over a year now. Is there any plan
to do something about this?

cu

AW
-- 
[...] If you don't want to be restricted, don't agree to it. If you are
coerced, comply as much as you must to protect yourself, just don't support
it. Noone can free you but yourself. (crag, on Debian Planet)
Arne Wichmann (a...@linux.de)


signature.asc
Description: Digital signature