On Mon, Oct 10, 2011 at 10:27:36AM +0200, Christoph Berg wrote: > > Can you also assess whether (old)stable are affected, and if so, provide > > packages? If not (affected or able), do let us know aswell. > > > > In any case, please mention CVE-2011-3598 in your changelogs. > > https://secunia.com/advisories/46248/ says "prior versions" are > affected, so yes. > > The relevant diff parts are:
Apparently this fell through the cracks. :-/ The impact of this issue is rather minor. Could you please fix this in the upcoming 6.0.4 point release for Squeeze? http://www.debian.org/doc/manuals/developers-reference/pkgs.html#upload-stable Cheers, Moritz -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org