tag 285128 sarge sid stop here * Joey Hess [Fri, 10 Dec 2004 14:51:51 -0500]:
> The advisory says that it affects version >= 3.3.1, so perhaps our > 3.2.3-1/2.3.3-1 in t-p-u/testing are not vulnerable. I've not checked. just for the record: yes, 3.2 is vulnerable. upstream released patches for both the 3.3.x and 3.2.x series. -- Adeodato Simó EM: asp16 [ykwim] alu.ua.es | PK: DA6AE621 Old men are fond of giving good advice to console themselves for their inability to set a bad example. -- La Rochefoucauld, "Maxims"