[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [Secure-testing-team] CVE-2007-1253: blender: eval injection vulnerability in kmz_ImportWithMesh.py



On Wed, Apr 04, 2007 at 03:42:13PM -0700, Steve Langasek wrote:
> On Thu, Apr 05, 2007 at 12:21:52AM +0200, Florian Ernst wrote:
> > On the other hand, the toolchain is frozen for quite some time and
> > identical both in testing and unstable, and blender_2.42a-6 which is
> > identical code-wise to -5etch1 has built on all archs, including mips
> > and sparc, without any problems.
> 
> Please refresh my memory, is there some reason we don't want to accept -6
> from unstable into etch?

<http://lists.debian.org/debian-release/2007/03/msg00677.html> lists
your reasons. So far I assumed they still apply.

In the light of the recent issues, would you prefer a -7 upload
reverting everything from -6 except for the one-liner to fix
CVE-2007-1253 (thus being identical to -5etch1)?

Cheers,
Flo

Attachment: signature.asc
Description: Digital signature


Reply to: