Re: XSS in paste 1.7.1-1 and 1.7.3.1-1

["Adam D. Barratt" <adam@adam-barratt.org.uk>]

On Mon, August 2, 2010 18:33, Piotr Ożarowski wrote:
> [Adam D. Barratt, 2010-08-03]
>> Have you discussed with the security team whether this is something they
>> believe a DSA should be issued for?
>
> I backported the patch for Debian (stable and unbstable) few hours after
> upstream released new version (didn't know about the issue before) and
> mailed security team few hours later. They suggested to contact release
> team instead.

Thanks.

I've marked the package for acceptance at the next dinstall.

Regards,

Adam