Re: Bug#595207: [SRM] Stable update for perdition (1.17.1-2+lenny1)
On Mon, Sep 06, 2010 at 01:16:49PM +0100, Adam D. Barratt wrote:
> On Mon, September 6, 2010 04:24, Simon Horman wrote:
> > I would like the upload of 1.17.1-2+lenny1 considred.
> > My proposal resolves two bugs.
> > * 595207: This is a fix for CVE-2009-3555 and enables
> > session renegotiation to work with Thunderbird 3.1.
> > This was resolve din 1.19~rc3-1 by making an appropriate
> > call to SSL_CTX_set_session_id_context().
> > I propose the same fix for 1.17.1-2+lenny1
> > * 595432: Perdition calls make in its postrm but has no dependency
> > on make. This was resolved in 1.18~rc2-1 by removing the call to
> > make. I propose the same fix for 1.17.1-2+lenny1
> This seems like a somewhat odd thing to be doing in a postrm script in the
> first place, imho.
> Please go ahead with the upload.