It sounds like there are two possible solutions to the weak session:
- improve the session on the client
- improve the session on the server side
The patch already exists for improving the client side of things. The
help-needed tag is for the server changes, which is what direction this
seems to have gone.
As upstream hasn't responded, one of three things needs to happen to move
forward on dealing with this RC bug:
1) develop the changes to generate the session on the server side.
2) reduce the severity below "serious".
3) contact the release team to keep block ajaxterm from testing and next
stable.
What makes the most sense for this bug?
--
Kees Cook @debian.org
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
