Re: CVE-2011-1071 / #615120 - security fix in stable?

2011-06-18 Thread Aurelien Jarno
On Thu, Jun 16, 2011 at 11:38:16AM +0200, Arne Wichmann wrote: > Hi, Hi, > I see that CVE-2011-1071 (#615120) is done in testing - shouldn't it be > fixed in stable, too? > This bug is already fixed in our stable SVN. After discussion with the release team, It will be uploaded for the 6.0.3 re

Re: CVE-2011-1071 / #615120 - security fix in stable?

2011-06-18 Thread Michael Gilbert
Arne Wichmann wrote: > Hi, > > I see that CVE-2011-1071 (#615120) is done in testing - shouldn't it be > fixed in stable, too? Yes, Debian security is done by volunteers with limited time, so the best way to get things fixed is to volunteer to do the work yourself (especially in cases like this

CVE-2011-1071 / #615120 - security fix in stable?

2011-06-16 Thread Arne Wichmann
Hi, I see that CVE-2011-1071 (#615120) is done in testing - shouldn't it be fixed in stable, too? cu AW -- [...] If you don't want to be restricted, don't agree to it. If you are coerced, comply as much as you must to protect yourself, just don't support it. Noone can free you but yourself. (cr