On Mon, Jul 11, 2005 at 01:55:08PM +0200, Thijs Kinkhorst wrote: > On Tue, June 28, 2005 12:37, Jeroen van Wolffelaar wrote: > > I just tried plain upstream 2.0.14, and with point 2 the output was > > seriously mangled, but not vulnerable or something (no html meta > > characters). Point 1 remains unclear what actually the problem is, > > point 3 is still not a vulnerability in my opinion. > > Can we consider this bug closed?
We still need to retroactively mention the CVE id in the changelog, but otherwise for the 'new' issues, yeah. --Jeroen -- Jeroen van Wolffelaar [EMAIL PROTECTED] (also for Jabber & MSN; ICQ: 33944357) http://Jeroen.A-Eskwadraat.nl -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]