Hmm... And it will probably be resolved when I get a chance to finish packaging up 1.4.5 which has the fixes already in it so not worth patching an older version when working on packaging a new version. Though the update will go to Sid so not sure when squeeze will get it.
Moritz Muehlenhoff wrote: > Package: acidbase > Severity: important > Tags: security > > Hi, > the following issues seem to be open in squeeze: > > http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4839 > > Cheers, > Moritz > > -- System Information: > Debian Release: squeeze/sid > APT prefers unstable > APT policy: (500, 'unstable') > Architecture: i386 (i686) > > Kernel: Linux 2.6.32-5-686 (SMP w/1 CPU core) > Locale: LANG=C, lc_ctype=de_de.iso-8859...@euro (charmap=ISO-8859-15) > Shell: /bin/sh linked to /bin/bash > > Versions of packages acidbase depends on: > pn dbconfig-common <none> (no description available) > ii debconf [debconf-2.0] 1.5.32 Debian configuration management > sy > pn libphp-adodb <none> (no description available) > ii libwww-perl 5.836-1 Perl HTTP/WWW client/server > librar > pn mysql-client | virtual-mysql- <none> (no description available) > pn php5 | php4 | php5-cli | php4 <none> (no description available) > pn postgresql-client <none> (no description available) > > acidbase recommends no packages. > > Versions of packages acidbase suggests: > pn snort-mysql | snort-pgsql <none> (no description available) > > -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org