Re: Requesting unfreeze of php-cas for CVE-2012-5583 fixed in 1.3.1-3 - Was: Re: Possible security issue in php-cas due to misuse of the libcurl API

[Ivo De Decker <ivo.dedecker@ugent.be>]

Hi Olivier,

On Sat, Dec 15, 2012 at 11:52:34AM +0100, Olivier Berger wrote:
> Please unblock php-cas so that the security fix for CVE-2012-5583 fixed
> in 1.3.1-3 can be shipped in wheezy.
> 
> Cf. : http://http.debian.net/debian/pool/main/p/php-cas/php-cas_1.3.1-3.dsc
> 
> I hope this is the correct procedure for such unblock during freeze, as
> I've never had to proceed along such paths in the past.

The correct procedure is to file an unblock request bug against
release.debian.org (reportbug has a template for this).

You should attach the debdiff between testing and unstable to this bug report.

Cheers,

Ivo