Bug#829606: jessie-pu: package duck/0.7+deb8u1
On Sun, Aug 28, 2016 at 03:55:24PM +0100, Adam D. Barratt wrote:
> Control: tags -1 +confirmed -moreinfo
>
> [re-ordered]
>
> > Am 2016-07-29 um 14:20 schrieb Julien Cristau:
> > > Control: tag -1 moreinfo
> > >
> > > On Mon, Jul 4, 2016 at 18:22:46 +0200, Simon Kainz wrote:
> [...]
> > >> Paul Wise found out that duck rund untrusted code from the current directory as
> > >> well as the ./lib and ./lib/checks directory. The attached patch fixes this
> > >> issue.
> > >>
> > > Hi,
> > >
> > > any chance of a diff from git diff -M or similar so the actual changes
> > > are easier to spot?
>
> On Mon, 2016-08-01 at 20:41 +0200, Simon Kainz wrote:
> > Ok, please see the attached patch, which is the same as the previous
> > one, but cleaned up - i made a diff without commiting all my changes,
> > so git had a hard time recognising rename vs. delete&create new.
>
> The changelog says "jessie-security" - with that changed to simply
> "jessie", please go ahead.
Simon,
what't the status here?
Cheers,
Moritz
Reply to: