Re: Accepted gaim 1:1.3.0-1 (i386 source all)

[Moritz Muehlenhoff <jmm@inutil.org>]

In gmane.linux.debian.devel.release, you wrote:
>>  gaim (1:1.3.0-1) unstable; urgency=3Dhigh
>>  .
>>    * New upstream version. Fixes two remote DoS/overflow security bugs,
>>      CAN-2005-1262 and CAN-2005-1261.
>
> At 183272 lines, the diff between gaim 1.2.1 and 1.3.0 is too large for
> me to review before sarge releases. Even excluding the po file changes
> it's still 6229 lines and has many non-security changes.
>
> Can we get a backported version of these security fixes into t-p-u for
> 1.2.1? The description of the fixes, especially for CAN-2005-1262, look
> easy enough to backport.

Extracted patches can be found at
http://www.inutil.org/jmm/patches/CAN-2005-1261.patch
http://www.inutil.org/jmm/patches/CAN-2005-1262.patch
 
Cheers,
        Moritz