traceroute root exploit

[Adam McKenna <adam-debian@flounder.net>]

A root exploit for traceroute that was verified to work on potato was posted
to bugtraq almost a week ago, yet no security bulletin has been published and
the update has not yet been released for potato.  I've been told by a member
of the security team that the update is sitting in proposed-updates, and has
been for over a month.  What is holding up this update?

Thanks,

--Adam

-- 
Adam McKenna <adam-sig@flounder.net> | "No matter how much it changes, 
http://flounder.net/publickey.html   |  technology's just a bunch of wires 
GPG: 17A4 11F7 5E7E C2E7 08AA        |  connected to a bunch of other wires."
     38B0 05D0 8BF7 2C6D 110A        |  Joe Rogan, _NewsRadio_
  7:53pm  up 123 days, 17:09, 11 users,  load average: 0.04, 0.03, 0.01