On Fri, Dec 7, 2012 at 14:03:22 +0100, Arno Töll wrote: > Hi, > > On 07.12.2012 12:20, Jonathan Wiltshire wrote: > > Thanks for securing it quickly :) Is there any danger of the vulnerable > > code being in use on other systems, e.g. as part of a dak install? > > Indeed, thanks for fixing the issue so fast. > > But full disclosure FTW. Now, that the problem is fixed please share > some details about the nature of the vulnerability. > The commits from the last couple of days in http://anonscm.debian.org/gitweb/?p=mirror/dak.git should allow you to take a guess. Cheers, Julien
Attachment:
signature.asc
Description: Digital signature