Re: Please remove knowledgetree and slash for security issues

2006-08-27 Thread Moritz Muehlenhoff
Steve Langasek wrote: Steve Langasek wrote: In the meantime, I'm downgrading 160579 because I don't see anything in= that report that would justify claiming the package is unreleasable. It's also vulnerable to CVE-2004-2656 (no bug seems to exist) and CVE-2001-1535 (328927). FWIW, of

Re: Please remove knowledgetree and slash for security issues

2006-08-27 Thread Steve Langasek
On Sun, Aug 27, 2006 at 09:48:42PM +0200, Moritz Muehlenhoff wrote: Steve Langasek wrote: Steve Langasek wrote: In the meantime, I'm downgrading 160579 because I don't see anything in= that report that would justify claiming the package is unreleasable. It's also vulnerable to

Re: Please remove knowledgetree and slash for security issues

2006-08-23 Thread Steve Langasek
On Wed, Aug 23, 2006 at 11:09:50PM +0200, Moritz Muehlenhoff wrote: Steve Langasek wrote: In the meantime, I'm downgrading 160579 because I don't see anything in that report that would justify claiming the package is unreleasable. It's also vulnerable to CVE-2004-2656 (no bug seems to

Re: Please remove knowledgetree and slash for security issues

2006-08-22 Thread Steve Langasek
severity 160579 minor thanks On Mon, Aug 21, 2006 at 04:21:20PM +0200, Thijs Kinkhorst wrote: I'd like to request removal of knowledgetree for testing for these reasons: * Has two security issues; * Has an open request for adoption since a couple of months but no takers; * Has low popcon

Please remove knowledgetree and slash for security issues

2006-08-21 Thread Thijs Kinkhorst
Hi, I'd like to request removal of knowledgetree for testing for these reasons: * Has two security issues; * Has an open request for adoption since a couple of months but no takers; * Has low popcon numbers; * Is a couple of versions behind upstream. (See bug #373137) Same goes for slash: * Has

Re: Please remove knowledgetree and slash for security issues

2006-08-21 Thread Bastian Blank
On Mon, Aug 21, 2006 at 04:21:20PM +0200, Thijs Kinkhorst wrote: I'd like to request removal of knowledgetree for testing for these reasons: Same goes for slash: I think you should ask for removal from the archive for such packages. Bastian -- No one wants war. -- Kirk,