Re: testing asterisk for Wheezy LTS
On 2016-04-24 13:56:06, Thorsten Alteholz wrote:
> Hi everybody,
>
> I uploaded version 1.8.13.1~dfsg1-3+deb7u4 of asterisk to:
> https://people.debian.org/~alteholz/packages/wheezy-lts/asterisk/amd64/
> https://people.debian.org/~alteholz/packages/wheezy-lts/asterisk/i386/
>
> Please give it a try and tell me about any problems you met.
Could you clarify why CVE-2014-4047 and CVE-2014-2287 were not included
in this upload?
Both are what seem to be serious enough DOS attacks, and are not marked
no-dsa or anything. You are still assigned the package in dla-needed.txt
so for now I'll assume you will complete the work, but please do update
the status correctly next time, or let us know of what the next steps
are.
A.
--
The lazy man does not stand in the way of progress. When he sees
progress roaring down upon him he steps nimbly out of the way
- Christopher Morley, "On Laziness"
Reply to: