Author: carnil
Date: 2013-10-21 19:56:10 +0000 (Mon, 21 Oct 2013)
New Revision: 24103

Modified:
   data/dsa-needed.txt
Log:
Add note about status for libhttp-body-perl

Upstream is unsure about what to choose as default. See
https://rt.cpan.org/Ticket/Display.html?id=88342#txn-1277340 for
upstream's comment on CVE-2013-4407.

Modified: data/dsa-needed.txt
===================================================================
--- data/dsa-needed.txt 2013-10-21 19:08:01 UTC (rev 24102)
+++ data/dsa-needed.txt 2013-10-21 19:56:10 UTC (rev 24103)
@@ -43,6 +43,7 @@
 ffmpeg/oldstable (geissert)
 --
 libhttp-body-perl/stable (carnil)
+  upstream is still discussing about choosing good default and making regexp 
configurable
 --
 libtar (carnil)
   no patch for CVE-2013-4420 yet


_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

Reply via email to