Re: Bug#706414: CVE-2013-3266: Insufficient input validation in the NFS server
On Fri, 2013-05-24 at 22:20 +0200, Florian Weimer wrote:
> * Steven Chamberlain:
> > I notice a problem though when this was (I think - I'm unsure of the
> > security team's processes here) copied to the main archive, probably so
> > that it can be included in stable-proposed-updates:
>
> Thanks for noticing.
[...]
> Could you contact ftpmaster and/or the stable release managers about
> this? I don't think we can do anything about it on the security side.
We (SRM) can't; we don't have any particular access to the upload queues
and none to security.d.o.
When there have been similar issues in the past, someone from the
security team has re-copied the packages over, but I'm not sure if that
was anything more involved than simply dputting or ftping the files.
I'll see if anyone on IRC can have a look.
Regards,
Adam
Reply to: