Hello Jan

I read on oss-security-l and the RedHat bugzilla that you've done some
investigations on the recent Quagga BGP security bugs and even
checked if older releases are vulnerable, too.

As they are, I wonder if you will try to backport patches for the older
versions of Quagga that were shipped e.g. with RHEL4 or if you just
upload 0.99.17. At Debian we usually try to be very conservative and
backport patches whenever possible but the GIT changesets you mentioned
look a bit too invasive to me :-(

bye,

-christian-





-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to