Bug#555231: oldstable: mt-daapd update addressing #555231

2009-11-12 Thread Julien BLACHE
"Adam D. Barratt" wrote: Hi, >> > > CVEs are available, although I wasn't entirely clear as to whether they >> > > apply to 1.4.0 or not. >> > >> > My bet is they don't; 1.4.0 is pretty ancient now. >> >> the prototype.js CVEs do apply to 1.4.0. > > For the avoidance of any doubt, I meant whet

Bug#555231: oldstable: mt-daapd update addressing #555231

2009-11-11 Thread Adam D. Barratt
On Wed, 2009-11-11 at 14:35 -0500, Michael Gilbert wrote: > On Wed, 11 Nov 2009 23:02:23 +0100 Julien BLACHE wrote: > > "Adam D. Barratt" wrote: > > > > Hi, > > > > > How big is the diff from prototype 1.4.0 (as used in the current > > > package) to 1.6.1? The bug report mentions that patches fi

Bug#555231: oldstable: mt-daapd update addressing #555231

2009-11-11 Thread Adam D. Barratt
[re-sending with corrected recipient list having realised that #555231 isn't a release.d.o bug] On Wed, 2009-11-11 at 14:35 -0500, Michael Gilbert wrote: > On Wed, 11 Nov 2009 23:02:23 +0100 Julien BLACHE wrote: > > "Adam D. Barratt" wrote: > > > > Hi, > > > > > How big is the diff from prototyp

Bug#555231: oldstable: mt-daapd update addressing #555231

2009-11-11 Thread Michael Gilbert
On Wed, 11 Nov 2009 23:02:23 +0100 Julien BLACHE wrote: > "Adam D. Barratt" wrote: > > Hi, > > > How big is the diff from prototype 1.4.0 (as used in the current > > package) to 1.6.1? The bug report mentions that patches fixing the two > > Don't know, I haven't even looked. There were other is